NetSight
high7.6

CVE-2020-7304

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRS…

Impact

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

Affected products

VendorProductAffected versions
McafeeData Loss Prevention
from 11.3.0 before 11.3.28
from 11.4.0 before 11.4.200
from 11.5.0 before 11.5.3

Weakness classification

References