CVE-2019-14551

Technical details (affected product, versions, root cause, exploit specifics) are not publicly provided in the connected documents; monitor for updates.

CVE-2019-14551: Cross-Site Request Forgery (CSRF)

Das Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution of code within a ZIP archive...