CSRF Vulnerability in Kaspersky Anti-Virus for Linux File Server
CVE-2017-9810
8.8HIGH
What is CVE-2017-9810?
The lack of Anti-CSRF tokens in the forms on the web interface of Kaspersky Anti-Virus for Linux File Server prior to Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) introduces a significant security risk. This vulnerability allows attackers to craft unauthorized requests that can be executed on behalf of authenticated users when they visit an attacker-controlled domain. Such exploitation can lead to various malicious actions without the user's consent, highlighting the importance of implementing CSRF protections in web applications.