https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 04:30:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45371 EUVD-2026-45371 https://cve.radiocsirt.org/vuln/euvd-2026-45371 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24983 <p>An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF.</p> <p>An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24983 https://cve.radiocsirt.org/vuln/ghsa-mfjv-v3p5-r7fc <p>An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF.</p> <p>An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF.</p> https://cve.radiocsirt.org/vuln/ghsa-mfjv-v3p5-r7fc https://cve.radiocsirt.org/vuln/gsd-2020-24983 gsd-2020-24983 https://cve.radiocsirt.org/vuln/gsd-2020-24983