CVE-2020-10771
CVE-2020-10771
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Jun 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.
Affected products
n/a · InfinispanWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →