Unscored CVE-2020-28931 EUVD-2020-21319GHSA-pcmg-wjrm-9r44

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to…

Published Dec 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

References

https://blog.bssi.fr/multiple-vulnerabilities-within-epson-eps-tse-server-8/#vulnerability-3