TI-2023-12908 CVE-2023-28361 · GHSA-g562-q5g5-pfpwCross-site request forgery in UniFi OSPriority LOW 29A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affe…CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00295 · Published 2023-05-11 · No fix listed CWE-352