CVE-2019-3959 - Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link

Back Back to CVE browser

HIGH

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link

Published Jul 31, 2019

8.8

HIGH

CVSS 3.0

EPSS 0.83%

Description

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

Affected products

Vendor n/a Product WallacePOS Default
n/a
- Version
  1.4.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

WallacePOS

n/a

Version	Status	Constraints
1.4.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13566
Advisory
https://www.tenable.com/security/research/tra-2019-37
x_refsource_MISCExploitPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13566		Advisory
https://www.tenable.com/security/research/tra-2019-37		x_refsource_MISCExploitPatchThird Party Advisory