CVE-2023-39372
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
StarTrinity Softswitch version 2023-02-16 contains multiple CSRF vulnerabilities (CWE-352) that may allow attackers to perform unauthorized actions on behalf of users.
Risk Assessment
Attackers could exploit these vulnerabilities to take control of user accounts, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update to the latest version of the software and implement protections against CSRF attacks.
Other vulnerabilities in StarTrinity Softswitch
See all- CVE-2023-39371High
In version 2023-02-16 of StarTrinity Softswitch, there is an Open Redirect vulnerability that may lead to unauthorized redirection of users to malicious sites.
- CVE-2023-39370High
In version 2023-02-16 of StarTrinity Softswitch, there is a persistent XSS vulnerability (CWE-79) that may allow attackers to inject malicious JavaScript code into the application.
- CVE-2023-39369High
Version 2023-02-16 of StarTrinity Softswitch has multiple reflected XSS vulnerabilities (CWE-79). An attacker can exploit these vulnerabilities to inject malicious JavaScript code into server responses.
Original NVD description (English source)
StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352)