CVE-2019-10253

A Cross-Site Request Forgery CSRF vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files. The specific flaw exists within the handling of...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files. The specific flaw exists within the handling of...

CVE-2019-10253

The CVE-2019-10253 entry concerns TeamMate+ 21.0.0.0 and describes a Cross-Site Request Forgery (CSRF) flaw in Upload/DomainObjectDocumentUpload.ashx where CSRF token validation is not performed for POST requests, allowing a remote attacker to modify data or replace uploaded files. Connected sour...