CVE-2025-63952
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET re…
Published: 2025-11-24 · CVSS: 5.7 · CVSS 3.1
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7