Skip to content
OpenAdvisories
Medium · 4.7 CVE-2021-27701 EUVD-2021-14443GHSA-78mr-78x2-c4q9

SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi wifi portal. The application does not cont…

Published Nov 12, 2024 · Updated Nov 18, 2024 · Assigned by mitre

Description

SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request.

References