CVE-2023-43118

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379

ADP enrichment

CVE

No English description supplied.

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379

CISA-ADP

No English description supplied.

No references supplied.