CVE-2020-13231

CVE-2020-13231 affects Cacti prior to 1.2.11, where auth_profile.php?action=edit permits CSRF to change an admin email. The root cause is improper CSRF protection in the affected admin profile edit flow, enabling an attacker to trigger an admin email change without authentication. Impacts include...