CVE-2023-6689 (published 2023-12-19T23:20:22.195Z)





A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.




Affected products: Vendor: EFACEC
Product: BCU 500
Versions: version 4.07