CVE-2021-38705

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery CSRF. A successful attack would consist of an authenticated user following a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user. This can be exploited to create a secondary...

CVE-2021-38705

creationtimestamp| type| source ---|---|--- 2021-09-08 00:23:12+00:00| seen| https://t.me/cibsecurity/28404...

CVE-2021-38705

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack requires an authenticated user to follow a malicious link, enabling arbitrary actions with the user’s privileges. The described impact includes the ability to create a secondary administrator account for the a...