NetSight
high8.8

CVE-2022-43710

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique tok…

Impact

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.

Affected products

VendorProductAffected versions
GxsoftwareXperiencentral
from 10.31.0 through 10.33.0

Weakness classification

References