Non évaluée

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g.,...

CVE-2020-27997 Première détection SecPulse Feb 20, 2021

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
report securitylab.github.com

Faits clés

Gravité: Non évaluée
Publication: Feb 20, 2021
Première détection SecPulse: Feb 20, 2021

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:53