Description (CNA)
The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Westermo / Lynx | affected L206-F2G1; affected 4.24 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.