Skip to content
OpenAdvisories
High · 8.8 CVE-2023-25832 EUVD-2023-29720GHSA-xf5h-8pqw-mggq

BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.

Published May 9, 2023 · Updated Apr 10, 2025 · Assigned by Esri

Description

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.0 and below that may allow an attacker to trick an authorized user into executing unwanted actions.

Affected products

VendorProductAffectedFixed
Esri Portal for ArcGIS All – ≤ 11.0 —

References