CVE-2020-24982
PoC —CVSS 3.1
4.3 medium
EPSS
<1%p38
Published
()
Modified
Description
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.
- Vendors
- quadbase
- Products
- espressdashboard
- Weakness
- CWE-352
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.