Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-28141

Cross-Site Request-Forgery

Description

The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visit an attacker-controlled website or click on a malicious link. E.g. an attacker can forge malicious links to reset the admin password or create new users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Image Access GmbH Scan2Net

Default version status: affected

  • 0 to < 7.40affected

References