atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.

Published Jun 8, 2017 · Updated Sep 16, 2024 · Assigned by mitre