CVE-2023-3579
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A vulnerability has been identified in version 7.11.8 of HadSky in an unknown functionality of the User Handler component, leading to cross-site request forgery (CSRF). The attack can be launched remotely.
Risk Assessment
This vulnerability may allow attackers to perform unauthorized actions on behalf of users, posing a serious threat to the organization's security.
Recommendation
It is recommended to update to the latest version of HadSky and implement mechanisms to protect against CSRF attacks.
Original NVD description (English source)
A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233372.