CVE-2024-3782
Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback
| Assigner | INCIBE |
| Reserved | 2024-04-15 |
| Published | 2024-04-15 |
| Updated | 2024-08-01 |
Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CWE-352 Cross-Site Request Forgery (CSRF)
Alejandro Amorín Niño
Guillermo Tuvilla Gómez
Sergio Román Hurtado
