CVE-2023-4837
Cross-site request forgery (CSRF) in SmodBIP
- State
- Published
- Severity
- 8.8 High
- Published
- Oct 10, 2023
- Updated
- Sep 18, 2024
- Reserved
- Sep 8, 2023
Description
SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CERT-PL |
Weaknesses
- CWE-352 Cross-Site Request Forgery (CSRF)
Affected Products
| Product | Versions |
|---|---|
SmodBIPJan Syski |
|
References
- https://cert.pl/posts/2023/10/CVE-2023-4837/third-party-advisory
- https://cert.pl/en/posts/2023/10/CVE-2023-4837/third-party-advisory
- https://smod.pl/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.