CVE-2019-13183

2019-07-07T15:15:00
ID CVE-2019-13183
Type cve
Reporter cve@mitre.org
Modified 2019-07-09T16:11:00

Description

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.