Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://jvn.jp/en/jp/JVN47164236/index.html | third party advisory vendor advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039 | third party advisory vendor advisory |
http://www.sharp.co.jp/support/photoplayer/fw_update.html | vendor advisory |