CVE-2023-39446
Socomec MOD3GP-SY-120K Cross-Site Request Forgery
- State
- Published
- Severity
- 8.9 High
- Published
- Sep 18, 2023
- Updated
- Sep 24, 2024
- Reserved
- Sep 6, 2023
Description
Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necessary to create specially designed URLs and originate malicious actions when a legitimate user is logged into the web application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.9 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H | icscert |
Weaknesses
- CWE-352 Cross-Site Request Forgery
Affected Products
| Product | Versions |
|---|---|
MODULYS GP (MOD3GP-SY-120K)Socomec |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.