CSRF Vulnerability in Secomea GateManager Web UI Allows Phishing Attackers to Hijack User Sessions

CSRF Vulnerability in Secomea GateManager Web UI Allows Phishing Attackers to Hijack User Sessions

CVE-2022-25778 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.

Learn more about our Web App Pen Testing.