CVE-2020-16256

The API on Winston 1.5.4 devices is vulnerable to CSRF.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:winstonprivacy:winston_firmware:1.5.4:*:*:*:*:*:*:*
cpe:2.3:h:winstonprivacy:winston:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:07

Type Values Removed Values Added
References () https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4 - Exploit, Third Party Advisory () https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4 - Exploit, Third Party Advisory
References () https://winstonprivacy.com/ - Product () https://winstonprivacy.com/ - Product

Information

Published : 2020-10-28 18:15

Updated : 2024-11-21 05:07


NVD link : CVE-2020-16256

Mitre link : CVE-2020-16256

CVE.ORG link : CVE-2020-16256


JSON object : View

Products Affected

winstonprivacy

  • winston
  • winston_firmware
CWE
CWE-352

Cross-Site Request Forgery (CSRF)