{"api_version":"1","generated_at":"2026-07-23T14:28:30+00:00","cve":"CVE-2022-43710","urls":{"html":"https://cve.report/CVE-2022-43710","api":"https://cve.report/api/cve/CVE-2022-43710.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-43710","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-43710"},"summary":{"title":"CVE-2022-43710","description":"Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2023-07-26 14:15:00","updated_at":"2023-08-04 16:05:00"},"problem_types":["CWE-352"],"metrics":[],"references":[{"url":"https://service.gxsoftware.com","name":"https://service.gxsoftware.com","refsource":"MISC","tags":[],"title":"Hello, how can we assist you?","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://service.gxsoftware.com/hc/nl/articles/12208173122461","name":"https://service.gxsoftware.com/hc/nl/articles/12208173122461","refsource":"MISC","tags":[],"title":"Security check","mime":"text/html","httpstatus":"403","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-43710","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43710","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"43710","vulnerable":"1","versionEndIncluding":"10.33.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gxsoftware","cpe5":"xperiencentral","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2022-43710","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://service.gxsoftware.com","refsource":"MISC","name":"https://service.gxsoftware.com"},{"refsource":"MISC","name":"https://service.gxsoftware.com/hc/nl/articles/12208173122461","url":"https://service.gxsoftware.com/hc/nl/articles/12208173122461"}]}},"nvd":{"publishedDate":"2023-07-26 14:15:00","lastModifiedDate":"2023-08-04 16:05:00","problem_types":["CWE-352"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:gxsoftware:xperiencentral:*:*:*:*:*:*:*:*","versionStartIncluding":"10.31.0","versionEndIncluding":"10.33.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}