Cross-Site Request Forgery Vulnerability in XHQ by Siemens
CVE-2019-13930
What is CVE-2019-13930?
A security vulnerability in Siemens' XHQ allows for a potential Cross-Site Request Forgery attack. It exploits the web interface when a user unknowingly accesses a malicious link. For successful exploitation, the attacker requires the legitimate user's interaction, as the user must be authenticated. If successful, the attacker can initiate actions permitted to that user, leading to unauthorized content modification or access within the application. As of the advisory's publication, there was no evidence of public exploitation of this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
XHQ All versions < V6.0.0.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved