CVE-2020-28403

ALTO 8.8CVE-2020-28403 · Published 29/01/2021 · updated 17/06/2026

En resumen

CVE-2020-28403 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a star (iris).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.67%, mayor que el 52.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
star iris	`= 2019.2.0.6`	No fix yet

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the administrative account of the application.

References

cds.thalesgroup.com/en/tcs-cert/CVE-2020-28403
excellium-services.com/cert-xlm-advisory/CVE-2020-28403 · Third Party Advisory
starpracticemanagement.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free