Unrated severityNVD Advisory· Published Aug 13, 2020· Updated Aug 4, 2024

DLP ePO extension - Cross-site request forgery

CVE-2020-7304

Description

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

Affected products

McAfee/Data Loss Prevention (DLP) ePO extensionllm-fuzzy
Range: <11.5.3
McAfee/DLP ePO extensionv5
Range: 11.3

Patches

Vulnerability mechanics

References

kc.mcafee.com/corporate/indexmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000