| Package | Affected versions | Patched versions |
|---|---|---|
| bigfix inventory | ≥ 9.0, < 10.0.7.0 | 10.0.7.0 |
This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free