Vulnerability Description
Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gxsoftware | Xperiencentral | >= 10.31.0, <= 10.33.0 |
Related Weaknesses (CWE)
References
- https://service.gxsoftware.comProduct
- https://service.gxsoftware.com/hc/nl/articles/12208173122461Vendor Advisory
- https://service.gxsoftware.comProduct
- https://service.gxsoftware.com/hc/nl/articles/12208173122461Vendor Advisory
FAQ
What is CVE-2022-43710?
CVE-2022-43710 is a vulnerability with a CVSS score of 8.8 (HIGH). Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of al...
How severe is CVE-2022-43710?
CVE-2022-43710 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-43710?
Check the references section above for vendor advisories and patch information. Affected products include: Gxsoftware Xperiencentral.