Skip to content
Sign in
Not rated

CVE-2022-38359 Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence…

Description

Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections. An attacker can, for instance, delete the admin user by directing an authenticated user to the URL https://<target-address>/module/admin_user/index.php?DataTables_Table_0_length=10&user_selected%5B%5D=1&user_mgt_list=delete_user&action=submit by means of a crafted link.

Affected products and versions

Product Affected versions Fixed in
Eyes of Network 5.3 No fix stated

Other CVEs of Eyes of Network

The 2 CVEs of Eyes of Network →
CVE-2022-38358 Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to… Not rated
Track this CVE