medium4.3
CVE-2020-24982
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9.
Impact
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quadbase | Espressdashboard | Version 7.0 |