PT-2023-18974 · Unknown · Media Cp Media Control Panel

Moriel Harush · Published 2023-02-15 · Updated 2023-02-24 · CVE-2023-23465

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version

Description The issue allows for CSRF, which is possible through an unspecified endpoint.

Recommendations For the latest version of Media CP Media Control Panel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-23465

Affected Products

Media Cp Media Control Panel

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-23465 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23465 · Vendor Advisory
• https://t.me/cvenotify/44391 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note