CVE-2024-56903

CVSS 8.1 HIGHEPSS 0.3%CWE-352

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

03 fev 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Produtos afetados

n/a · n/a

Referências

https://github.com/DRAGOWN/CVE-2024-56903