Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request.
References
Link | Resource |
---|---|
https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9 | Not Applicable |
https://exchange.xforce.ibmcloud.com/vulnerabilities/147965 | Third Party Advisory |
Configurations
Information
Published : 2018-08-03 14:29
Updated : 2018-10-02 08:54
NVD link : CVE-2018-14926
Mitre link : CVE-2018-14926
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
matera
- banco