PT-2018-12189 · Abbyy · Abbyy Flexicapture

Published 2018-07-09 · Updated 2018-09-07 · CVE-2018-13793

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABBYY FlexiCapture versions prior to 12 Release 1 Update 7

Description The issue concerns multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API. These vulnerabilities exist in various components, including Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login.

Recommendations For versions prior to 12 Release 1 Update 7, update to version 12 Release 1 Update 7 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-13793

Affected Products

Abbyy Flexicapture

References · 3

• http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13793 · Security Note
• https://osv.dev/vulnerability/CVE-2018-13793 · Vendor Advisory