CVE-2022-30694
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other…
Published: 2022-11-08 · CVSS: 6.5 · CVSS 3.1
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7