CVE-2022-47559 — Cross-Site Request Forgery in Ormazabal products
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affect…
Published: 2023-09-19 · CVSS: 8.6 · CVSS 3.1
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7