Description (CNA)
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Guangdong / Pythagorean OA Office System | affected 4.50.0; affected 4.50.1; affected 4.50.2; affected 4.50.3; affected 4.50.4; affected 4.50.5; affected 4.50.6; affected 4.50.7; affected 4.50.8; affected 4.50.9; affected 4.50.10; affected 4.50.11; affected 4.50.12; affected 4.50.13; affected 4.50.14; affected 4.50.15; affected 4.50.16; affected 4.50.17; affected 4.50.18; affected 4.50.19; affected 4.50.20; affected 4.50.21; affected 4.50.22; affected 4.50.23; affected 4.50.24; affected 4.50.25; affected 4.50.26; affected 4.50.27; affected 4.50.28; affected 4.50.29; affected 4.50.30; affected 4.50.31 |
CWE
CWE-352
References
- https://vuldb.com/?id.230458
- https://vuldb.com/?ctiid.230458
- https://gitee.com/gouguopen/office/issues/I74VRG
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.