GHSA-cfxm-vc39-rjf6
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 29, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.