CVE-2024-56901
A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Administrator ac…
Published: 2025-02-03 · CVSS: 8.8 · CVSS 3.1
A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers to arbitrarily create Administrator accounts via a crafted GET request method. This vulnerability is used in chain with CVE-2024-56903 for a successful CSRF attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7