CVE-2023-43118: CSRF
Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43118?
CVE-2023-43118 is a Cross Site Request Forgery (CSRF) vulnerability in the Chalet application in Extreme Networks Switch Engine (EXOS) before version 32.5.1.5.
What is the severity of CVE-2023-43118?
CVE-2023-43118 has a severity score of 8.8 (high).
How does CVE-2023-43118 affect the affected software?
CVE-2023-43118 affects the Extreme Networks Switch Engine (EXOS) versions before 32.5.1.5.
How can an attacker exploit CVE-2023-43118?
An attacker can exploit CVE-2023-43118 by sending specially crafted requests via the /jsonrpc API, allowing them to run arbitrary code and cause other unspecified impacts.
How can I fix CVE-2023-43118?
To fix CVE-2023-43118, update to version 31.7.2 or 32.5.1.5 of Extreme Networks Switch Engine (EXOS).