CVE-2024-56903

high

Description

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack.

References

https://github.com/DRAGOWN/CVE-2024-56903

Details

Source: Mitre, NVD

Published: 2025-02-03

Updated: 2025-03-04

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Severity: High

EPSS

EPSS: 0.00032

Detections

Analytics