CVE-2020-36918 in iDS6 DSSPro Digital Signage System
要約
〜によって MITRE • 2026年01月06日
iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can craft malicious web pages to trick logged-in administrators into adding unauthorized users by exploiting the lack of CSRF protections.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.