Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the stop and restart API endpoints. An attacker can cause unauthorized timesheet state changes by tricking an authenticated user into visiting a malicious page, leading to manipulation of time records...