![]() ![]() NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Ī successful CSRF attack could force the user to perform state changing requests on the application. The associated identifier of this vulnerability is VDB-248687. The exploit has been disclosed to the public and may be used. The manipulation leads to cross-site request forgery. This issue affects some unknown processing of the file /dashboard?controller=UserCollection::createUser of the component User Creation Handler. A vulnerability was found in automad up to 1.10.9. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |