← CVE Intelligence

CVE-2020-7304

DLP ePO extension - Cross-site request forgery PUBLISHED

Description (CNA)

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

Affected (CNA)

Vendor / productVersions
McAfee / DLP ePO extensionaffected 11.3 before 11.3.28; affected 11.4 before 11.4.200; affected 11.5 before 11.5.3

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.