high8.8Public exploit code
CVE-2019-16068
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Enigma NMS 65.0.0 - Cross-Site Request Forgery2019-09-09 · webapps · multiple
Impact
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi request. This can be triggered via XSS or an IFRAME tag included within the site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netsas | Enigma Network Management Solution | through 65.0.0 |