Cross-site Request Forgery (CSRF)

Overview hfs is a HTTP File Server Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the apiMiddleware request filter in src/apiMiddleware.ts. An attacker can create accounts or change configuration by causing a logged-in administrator’s browser to send a...