Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.
References
| Link | Resource |
|---|---|
| https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379 | Vendor Advisory |
| https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379 - Vendor Advisory |
27 Oct 2023, 16:25
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Extremenetworks
Extremenetworks exos |
|
| References | (MISC) https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379 - Vendor Advisory | |
| CWE | CWE-352 | |
| CPE | cpe:2.3:o:extremenetworks:exos:*:*:*:*:*:*:*:* |
16 Oct 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-16 20:15
Updated : 2024-11-21 08:23
NVD link : CVE-2023-43118
Mitre link : CVE-2023-43118
CVE.ORG link : CVE-2023-43118
JSON object : View
Products Affected
extremenetworks
- exos
CWE
CWE-352
Cross-Site Request Forgery (CSRF)