Beveiligingsadvies
CVE-2019-15496
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.