CVE-2017-20020 — Solare Solar-Log cross-site request forgery

CVE-2017-20020

Solare Solar-Log cross-site request forgery PUBLISHED

Description (CNA)

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

Affected (CNA)

Vendor / product	Versions
Solare / Solar-Log	affected 2.8.4-56; affected 3.5.2-85

CWE

CWE-352

References

http://seclists.org/fulldisclosure/2017/Mar/58
https://vuldb.com/?id.98930

ADP enrichment

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2017/Mar/58
https://vuldb.com/?id.98930

CISA-ADP

No English description supplied.

No references supplied.