SmartVista BackOffice Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability exists in SmartVista BackOffice, specifically in the SmartVista Suite version 2.2.22. This vulnerability can be exploited through a crafted GET request, bypassing the application's CSRF protection mechanisms.
Impact
Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can trick a user into performing actions they did not intend to, potentially leading to unauthorized changes or actions within the application.
Added: Sep 18, 2025, 4:27 PM
Updated: Sep 18, 2025, 6:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
0.0relevance
0.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.