An issue was discovered in creditease-sec insight through 2018-09-11. login_user_delete in srcpm/app/admin/views.py allows CSRF.

Published Jan 22, 2019 · Updated Aug 4, 2024 · Assigned by mitre