Skip to content
Threat Feed

Tag

Oob-Injection

1 brief RSS
medium threat

SolarEdge CSRF and Out-of-Band Injection Vulnerability

A CSRF-OOB-Injection vulnerability exists in SolarEdge Monitoring Platform's `/solaredge-web/p/initClient` endpoint due to improper validation of session parameters, allowing attackers to manipulate headers to initiate requests to attacker-controlled domains, potentially leading to session compromise and unauthorized system control.

SolarEdge Monitoring Platform - Framework /solaredge-web/ solaredge csrf oob-injection webapps
2r 1t 1i