Vendor
Cloud Solutions SAS
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.0
Wimi Teamwork < v7.38.17 CSRF
Wimi Teamwork versions prior to 7.38.17 contains a cross-site request forgery (CSRF) vulnerability in its API. The API accepts any authenticated request that contains a JSON field named 'csrf_token' without validating the field’s value; only the presence of t…