7.5
High
CVE-2020-1977 Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated…
Description
Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Expedition 1.1 | 1.1 → 1.1.51 | No fix stated |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
- www.tenable.com www.tenable.com
Timeline
- Published
- Last modified
Other CVEs of Expedition
The 12 CVEs of Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
High
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Medium
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Medium
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
High