CVE-2024-48846 HIGH

CVE-2024-48846: Cross Side Request Forgery, CSRF

Vendor Abb
Product ASPECT-Enterprise
Weakness CWE-352 · CSRF
Published December 5, 2024
Last update December 5, 2024
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Key dates

02Disclosure timeline

December 5, 2024 CVE published
December 5, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-51635 WordPress While Loading plugin <= 3.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability CVE-2024-54372 WordPress Insertify plugin <= 1.1.4 - CSRF to Remote Code Execution vulnerability CVE-2026-8708 Genzel breadcrumbs <= 1.2 - Cross-Site Request Forgery to Settings Update via Plugin Settings Page CVE-2023-22681 WordPress Online Exam Software : eExamhall Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2025-31459 WordPress Login Alert plugin <= 0.2.1 - CSRF to Stored XSS vulnerability