Cross-site Request Forgery (CSRF)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the doupdate process. An attacker can cause an authenticated administrator to unintentionally trigger a package upgrade by enticing them to visit a...