Description
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
Medium · 5.7
CVE-2025-63952
EUVD-2025-198970GHSA-qf6c-fm2q-4fvw
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitraril…
Published Nov 24, 2025 · Updated Nov 24, 2025 · Assigned by mitre