CVE-2023-3029
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability has been found in Guangdong Pythagorean OA Office System up to version 4.50.31, allowing cross-site request forgery (CSRF) attacks through manipulation of the id argument in the /note/index/delete file.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of unauthorized access to system functions. This may lead to serious consequences for the organization's data security.
Recommendation
It is recommended to update the system to the latest version to eliminate this vulnerability and implement additional security measures against CSRF attacks.
Original NVD description (English source)
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.