CVE-2023-4837

Summary

SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.

Affected Software

Weaknesses

• CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)

ADP Enrichment

CVE Program Container

Additional References

• https://cert.pl/posts/2023/10/CVE-2023-4837/
• https://cert.pl/en/posts/2023/10/CVE-2023-4837/
• https://smod.pl/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://cert.pl/posts/2023/10/CVE-2023-4837/
• https://cert.pl/en/posts/2023/10/CVE-2023-4837/
• https://smod.pl/

• ←Previous
• Next→