Skip to content
OpenAdvisories
Unscored CVE-2021-20096 EUVD-2021-7553GHSA-294f-6x8f-w547

Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by tricking legitimate …

Published May 25, 2021 · Updated Aug 3, 2024 · Assigned by tenable

Description

Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

Affected products

VendorProductAffectedFixed
— OpenOversight 0.6.4 —

References