CVE-2020-36623
Medium
Description
A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file src/index.js. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The name of the patch is aea66f12b8cdfc3c8c50ad6a9c89d8307e9d0a91. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216475.
SeverityMedium
CVSS4.3
Exploit probability—
ProductPengu
PublishedDec 21, 2022
First seenDec 21, 2022
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- pengu_project pengu2020-11-02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pengu_project pengu | v < 2020-11-02 | 2020-11-02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.