Description
An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator.
Unscored
CVE-2019-15089
EUVD-2019-6167GHSA-7v6x-p93c-4q36
An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator.
Published Sep 20, 2019 · Updated Aug 5, 2024 · Assigned by mitre