CVE-2020-11682

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request will succeed.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
https://www.securitymetrics.com/blog/where-did-request-come-from-cross-site-request-forgery-csrfThird Party Advisory
http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
https://www.securitymetrics.com/blog/where-did-request-come-from-cross-site-request-forgery-csrfThird Party Advisory

Timeline

Published: Jun 4, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-116836.8A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC valu CVE-2020-116849.1AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged CVE-2020-116857.5In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.CVE-2020-116862.7In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.CVE-2020-116877.5In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.CVE-2020-116887.5In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.CVE-2020-116896.5In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.CVE-2020-11697.8<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfull CVE-2020-116909.8In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.CVE-2020-116917.5In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.CVE-2020-116922.7In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.CVE-2020-116937.5JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.