CVE-2019-18206 - A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload

HIGH

A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload

Published Oct 30, 2019

8.8

HIGH

CVSS 3.1

EPSS 0.46%

A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=42		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8008		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 30, 2019

Updated Aug 5, 2024

Reserved Oct 19, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Oct 30, 2019

Updated Aug 5, 2024

Exploited since n/a