CVE-2023-6904

Summary

CVE-2023-6904 is a newly identified vulnerability affecting Jahastech NxFilter 4.3.2.5. The issue resides in the /config,admin.jsp file and involves a cross-site request forgery (CSRF) issue. The CSRF vulnerability can be triggered by manipulating the argument admin_name, which results in unauthorized requests. This attack can be executed remotely, making it a significant security concern. No response has been received from the vendor regarding this disclosure, and the VDB-248266 identifier has been assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.