CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On (SSO): from n/a through 1.2.5.
Explanation of Vulnerability in Simple Terms
EZPZ SAML SP Single Sign On versions up to 1.2.5 are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious link or page that, when visited by a logged-in administrator, performs unwanted actions on the SSO configuration. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability of the SSO system.
What an attacker can do
Trick a logged-in admin into performing unwanted SSO configuration changes via a malicious link or page.
Potential impact on your site
An attacker can modify SSO settings, potentially disrupting authentication or gaining unauthorized access to user accounts.
Conditions required to exploit
Admin must be logged in and visit attacker-controlled page or click a malicious link.
Key dates
External resources
Related vulnerabilities
