CVE-2021-36570: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---...

PT-2023-12291

Name of the Vulnerable Software and Affected Versions FUEL-CMS version 1.4.13 Description The issue allows remote attackers to run arbitrary code via post ID to the "/permissions/delete/2" API endpoint. This is a Cross Site Request Forgery vulnerability. Recommendations For FUEL-CMS version 1.4.1...

CVE-2021-36570

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---...