CVE-2022-36546: CSRF
Published Aug 26, 2022
·Updated
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.
Affected Software
2 affected components
Edoc-doctor-appointment-system Project Edoc-doctor-appointment-system=1.0.1
Hashenudara Edoc-doctor-appointment-system=1.0.1
Event History
Aug 26, 2022
CVE Published
via MITRE·08:37 PM
Data Sourced
via MITRE·08:37 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-36546?
CVE-2022-36546 has a moderate severity rating due to the potential for Cross-Site Request Forgery (CSRF) attacks.
2
How do I fix CVE-2022-36546?
To fix CVE-2022-36546, implement anti-CSRF tokens and ensure all state-changing requests require proper authentication.
3
What systems are affected by CVE-2022-36546?
CVE-2022-36546 affects Edoc Doctor Appointment System version 1.0.1.
4
What type of vulnerability is CVE-2022-36546?
CVE-2022-36546 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
5
Can CVE-2022-36546 lead to unauthorized actions?
Yes, CVE-2022-36546 can allow attackers to perform unauthorized actions on behalf of authenticated users.