CVE-2020-11682

Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request will succeed.

• CWE-352

• http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
• https://www.securitymetrics.com/blog/where-did-request-come-from-cross-site-request-forgery-csrfThird Party Advisory
• http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
• https://www.securitymetrics.com/blog/where-did-request-come-from-cross-site-request-forgery-csrfThird Party Advisory

Published

Jun 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11675Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of …8.8
• CVE-2020-11676Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of …8.8
• CVE-2020-11677Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of …8.8
• CVE-2020-11679Castel NextGen DVR v1.0.0 is vulnerable to privilege escalat…8.8
• CVE-2020-11680Castel NextGen DVR v1.0.0 is vulnerable to authorization byp…6.5
• CVE-2020-11681Castel NextGen DVR v1.0.0 stores and displays credentials fo…8.1
• CVE-2020-11683A timing side channel was discovered in AT91bootstrap before…6.8
• CVE-2020-11684AT91bootstrap before 3.9.2 does not properly wipe encryption…9.1
• CVE-2020-11685In JetBrains GoLand before 2019.3.2, the plugin repository w…7.5
• CVE-2020-11686In JetBrains TeamCity before 2019.1.4, a project administrat…2.7
• CVE-2020-11687In JetBrains TeamCity before 2019.2.2, password values were …7.5
• CVE-2020-11688In JetBrains TeamCity before 2019.2.1, the application state…7.5