CVE-2024-28141 — Cross-Site Request-Forgery

Description (CNA)

The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visit an attacker-controlled website or click on a malicious link. E.g. an attacker can forge malicious links to reset the admin password or create new users.

Affected (CNA)

Vendor / product	Versions
Image Access GmbH / Scan2Net	affected 0 before 7.40

CWE

CWE-352

References

https://r.sec-consult.com/imageaccess
https://www.imageaccess.de/?page=SupportPortal&lang=en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Dec/2