CVE-2019-16059

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...

CVE-2019-16059

CVE-2019-16059 affects Sentrifugo 3.2 and is described across multiple sources (NVD, Red Hat, CVE lists) as lacking CSRF protection, which could allow an attacker to trick an administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page. The connected docu...