medium6.5
CVE-2020-24570
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1.
Impact
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session information from logged-in users with a crafted link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.6.1 |
| Mbconnectline | Mymbconnect24 | through 2.6.1 |