NetSight
medium5.7

CVE-2024-23554

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).

Impact

Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to Remote Code Execution (RCE).

Affected products

VendorProductAffected versions
HcltechBigfix Platform
from 9.5 before 9.5.25
from 10 before 10.0.12
Version 11.0.1

Weakness classification

References