Unscored CVE-2023-43118 EUVD-2023-47538GHSA-c7fp-g3rh-mvf7

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31…

Published Oct 16, 2023 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

Advisories 1

WID-SEC-2023-2573 Extreme Networks ExtremeXOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 4, 2023

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379