PT-2017-16517

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 2.4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. This is demonstrated by exploitation of the following API endpoints: "admin/add user.lua"...