Cross-site Websocket Hijacking (CSWSH)

9 months ago

meshcentral is vulnerable to Cross-site Websocket Hijacking(CSWSH). The vulnerability is due to missing origin checks when using the control.ashx endpoint in MeshCentral. If an attacker can convince an admin end-user to click on a malicious link, they then can access the control.ashx admin…Read More