Engelsystem Cross-Site Request Forgery Vulnerability

Engelsystem is a shift planning system. The system includes features such as team management, event management, attendance management and mail system. A cross-site request forgery vulnerability exists in versions prior to Engelsystem commit hash 2e28336. A remote attacker can exploit this...

Cross site request forgery (csrf)

Engelsystem before commit hash 2e28336 allows CSRF...

CVE-2018-19182

Engelsystem before commit hash 2e28336 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue allows a remote attacker to induce unauthorized operations by persuading a user to submit a crafted request (the CVSS3 vector shows NETWORK, UI: REQUIRED, with HIGH impact on confide...