CVE-2018-15539: Cross-Site Request Forgery (CSRF)

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...