Sparx Systems Pro Cloud Server Cross-Site Request Forgery Vulnerability Allowing Session Hijacking

A Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server versions prior to 6.0.165 allows attackers to hijack user sessions. This vulnerability is present throughout the entire application and can be exploited to change the Pro Cloud Server Configuration password.

Impact

Exploitation of this vulnerability could lead to session hijacking, allowing an attacker to impersonate a user and potentially gain unauthorized access to sensitive information or functions within the application.