Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc.

Published Oct 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre