CWE-352

CWE-352

  • Severity: HIGH
  • CVE: CWE-352
  • Affected Hardware: BLU-IC2, BLU-IC4
  • Firmware Version: 1.19.5
  • Mitigations: NO
  • Reported by: Kevin Schaller, Benjamin Lafois, Alexi Bitsios, Sebastian Toscano, Dominik Schneider
  • Active exploitation of vulnerability: NO
  • Description: Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
  • Which versions patch releases are available for: 1.20