CSRF in Stvs Provision
CVE-2021-47723
STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests. Attackers can visit malicious web sites to trigger t…
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Stvs Provision — versions 5.5, 5.6, 5.7
- Stvs Sa Provision — versions 5.9.10 (build 2885-3a8219a)
Weakness classification (CWE)
References
- disclosure@vulncheck.com (Technical Description, exploit)
- disclosure@vulncheck.com (Product, product)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2021-47723?
- CVE-2021-47723 is a high-severity vulnerability in Stvs Provision, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2025-12-09.
- How severe is CVE-2021-47723?
- High severity. CVSS v3 base score is 8.8 out of 10.