PT-2026-68481

Name of the Vulnerable Software and Affected Versions Hubzilla versions prior to 11.4 Description A cross-site request forgery CSRF issue exists in the OAuth2 '/authorize' endpoint, which is handled by the post function within ZotlabsModuleAuthorize. This occurs because the system fails to valida...