Orta CVSS 6.1
CVE-2025-54969: Socet Gxp: siteler arası istek sahteciliği (CSRF)
Açıklama (NVD)
An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service without the user's knowledge.
Özet bilgiler
- Ürün
- Baesystems Socet Gxp
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L - EPSS
- %0,14 (yüzdelik 3)
- CWE
- CWE-352
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| baesystems-socet-gxp | — | — | 4.6.0.2 |