CVE-2019-15934EUVD-2019-683612.12.2019, 14:15Intesync Solismed 3.3sp has CSRF.CSRFEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary8.8 HIGHNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HBase ScoreCVSS 3.xEPSS ScorePercentile: 37%Affected Products (NVD)VendorProductVersionintesyncsolismed3.3:sp1𝑥= Vulnerable software versionsKnown Exploits!https://know.bishopfox.com/advisories/solismed-criticalhttps://know.bishopfox.com/advisories/solismed-criticalCommon Weakness EnumerationCWE-352 - Cross-Site Request Forgery (CSRF)The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.Referenceshttps://bishopfox.comhttps://know.bishopfox.com/advisories/solismed-criticalhttps://www.bishopfox.com/blog/news-category/advisories/https://www.solismed.com/https://bishopfox.comhttps://know.bishopfox.com/advisories/solismed-criticalhttps://www.bishopfox.com/blog/news-category/advisories/https://www.solismed.com/