Missing or incorrect nonce validation on a function makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link

This vulnerability affects the following application versions:

  • Really Simple SSL 7.2.2
  • Really Simple SSL 7.2.3
  • Really Simple SSL 8.0.0
  • Really Simple SSL 8.1.0
  • Really Simple SSL 8.1.1
  • Really Simple SSL 8.1.2
  • Really Simple SSL 8.1.3
  • Really Simple SSL 8.1.4
  • Really Simple SSL 8.1.5
  • Really Simple SSL 8.1.6
  • Really Simple SSL 8.3.0.1
  • Really Simple SSL 9.0.0
  • Really Simple SSL 9.0.2
  • Really Simple SSL 9.1.0
  • Really Simple SSL 9.1.1
  • Really Simple SSL 9.1.1.1
  • Really Simple SSL 9.1.2
  • Really Simple SSL 9.1.3
  • Really Simple SSL 9.1.4

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *