CVE-2020-24982

An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.45% chance of exploitation in the next 30 days, 37th percentile

Published

2021-03-15

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://c41nc.co.uk/cve-2020-24982/

References

• CVE Record
• NVD entry

Related

• CVE-2020-24978
• CVE-2020-24983
• CVE-2020-24977
• CVE-2020-24985
• CVE-2020-24972
• CVE-2020-24996