An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.

Published Aug 6, 2018 · Updated Aug 5, 2024 · Assigned by mitre