← CVE Intelligence

CVE-2024-25692

BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS PUBLISHED

Description (CNA)

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.1 and below that may in some cases allow a remote, unauthenticated attacker to trick an authorized user into executing unwanted actions via a crafted form. The impact to Confidentiality and Integrity vectors is limited and of low severity.

Affected (CNA)

Vendor / productVersions
Esri / Portal for ArcGISaffected all through 11.0

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.