PT-2020-15744

Name of the Vulnerable Software and Affected Versions mbCONNECT24 versions through 2.6.1 mymbCONNECT24 affected versions not specified Description An issue was discovered that allows attackers to steal session information from logged-in users with a crafted link, due to a CSRF issue with resultan...