Skip to content
OpenAdvisories
Medium · 4.2 CVE-2022-25778 EUVD-2022-30418GHSA-mx8g-4r5p-3rp5

Unload handlers may unintentionally defeat CSRF guards

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by Secomea

Description

Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.

Affected products

VendorProductAffectedFixed
Secomea GateManager unspecified – < 9.7 9.7

References