HIGH🇵🇱 Wersja polska

CVE-2018-14926

CVSS 8.8v3.0pub. 2018-08-03upd. 2024-11-21

Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Matera Banco

    APP
    Matera
    1.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-14925CRITICAL9.8PL ✓same product

Matera Banco — ujawnienie ścieżki stosu Java (stack trace) w backendzie

CVE-2018-14928HIGH7.5same product

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the...

CVE-2018-14924MEDIUM6.1same product

Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuari...

CVE-2018-14927MEDIUM5.3same product

Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default applic...

CVE-2018-14929MEDIUM6.1same product

Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp ...