VULNERABILITY INTELLIGENCE

CVE-2019-14836

CVSS score8.8 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2021-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references