CVE-2025-60645

The xxl-api interface management platform (v1.3.0) is vulnerable to a Cross-Site Request Forgery (CSRF) in its management module. Attackers can exploit a lack of proper CSRF protection to arbitrarily add users by sending a specially crafted GET request . As a temporary workaround, it is recommend...