Description
Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cyberdigm | DestinyECM | 5.24.10.* – < 5.24.10.2303, 5.23.10.* – < 5.23.12.2450, 5.23.02.* – < 5.23.08.2451, 5.22.* – < 5.22.12.2446, 5.21.*, 5.20.*, 5.19.* – < 5.21.12.2303 | 5.24.10.2303 |