Genexis Platinum 跨站请求伪造漏洞

漏洞信息详情

Genexis Platinum 4410是genexis的一款路由器

Genexis Platinum 4410 V2-1.28存在跨站请求伪造漏洞，该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.getastra.com/blog/911/csrf-broken-access-control-in-genexis-platinum-4410/

来源:MISC

链接:https://www.jinsonvarghese.com/broken-access-control-csrf-in-genexis-platinum-4410/

来源:MISC

链接:https://www.getastra.com/blog/911/csrf-broken-access-control-in-genexis-platinum-4410/

来源:MISC

链接:https://packetstormsecurity.com/files/159936/Genexis-Platinum-4410-P4410-V2-1.28-Missing-Access-Control-CSRF.html

来源:www.exploit-db.com

链接:https://www.exploit-db.com/exploits/49000

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/159936/Genexis-Platinum-4410-P4410-V2-1.28-Missing-Access-Control-CSRF.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-25015

暂无