Vasion Print Insufficient CSRF Protection Vulnerability

A vulnerability allowing insufficient Cross-Site Request Forgery (CSRF) protection has been identified in Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923. This vulnerability allows CSRF attacks to be executed, as the application does not properly enforce CSRF checks for most forms. Testing revealed that manipulating the CSRF token had no effect on the success of operations, leaving users vulnerable to potential exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of users, potentially allowing attackers to manipulate data or settings within the application.

Remediation

Users can update to Vasion Print, Virtual Appliance Host 22.0.843 and Application 20.0.1923 to address this vulnerability.