Cross-Site Request Forgery Vulnerability in XHQ by Siemens

CVE-2019-13930

Summary

A security vulnerability in Siemens' XHQ allows for a potential Cross-Site Request Forgery attack. It exploits the web interface when a user unknowingly accesses a malicious link. For successful exploitation, the attacker requires the legitimate user's interaction, as the user must be authenticated. If successful, the attacker can initiate actions permitted to that user, leading to unauthorized content modification or access within the application. As of the advisory's publication, there was no evidence of public exploitation of this issue.

References