PT-2018-12189 · Abbyy · Abbyy Flexicapture

Publicado 2018-07-09 · Atualizado 2018-09-07 · CVE-2018-13793

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABBYY FlexiCapture versions prior to 12 Release 1 Update 7

Description The issue concerns multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API. These vulnerabilities exist in various components, including Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login.

Recommendations For versions prior to 12 Release 1 Update 7, update to version 12 Release 1 Update 7 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-13793

Produtos afetados

Abbyy Flexicapture

Referências · 3

• http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13793 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-13793 · Aviso do Fabricante