CVE-2016-4504

—

CVSS 3.0

8.8 high

EPSS

<1%p41

Published

Mar 21, 2017 (Mar 21, 2017)

Modified

Jun 17, 2026

Description

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.

Vendors: meteocontrol
Products: weblog
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.