CVE-2020-7304

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

Score

CVSS 3.1 7.6 High

Status

Modified - trellixpsirt@trellix.com

Published

2020-08-13

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Data Loss Prevention (Mcafee)
• Dlp Epo Extension (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10326