CVE-2024-3782: falha de alta gravidade em WBSAirback White Bear Solutions
Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.3%
Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
WBSAirback · White Bear SolutionsCVEs relacionadas — WBSAirback White Bear Solutions
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3781CRITICALOS Command Injection vulnerability in WBSAirbackEPSS 1.2%CVE-2024-3789MEDIUMUncontrolled Resource Consumption vulnerability in WBSAirbackEPSS 1.0%CVE-2024-3786MEDIUMImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirbackEPSS 0.7%CVE-2024-3785MEDIUMImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirbackEPSS 0.7%CVE-2024-3784MEDIUMImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirbackEPSS 0.7%CVE-2024-3788MEDIUMImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirbackEPSS 0.6%