CVE-2019-13071

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-07-10

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Powerpanel (Cyberpowersystems)

References

• http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
• http://seclists.org/fulldisclosure/2019/Jul/11