CVE-2024-28141 — Cross-Site Request-Forgery
The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visi…
Published: 2024-12-11 · CVSS: 6.3 · CVSS 3.1
The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visit an attacker-controlled website or click on a malicious link. E.g. an attacker can forge malicious links to reset the admin password or create new users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7