CVE-2019-18651

A cross-site request forgery CSRF vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions e.g., delete application users by sending a crafted HTML document or encoded URL to a user that the website trusts. The user...

CVE-2019-18651

CVE-2019-18651 is a CSRF vulnerability in 3xLogic Infinias Access Control up to version 6.6.9586.0. The flaw allows an attacker to trigger unauthorized actions (e.g., deleting application users) by enticing a trusted user with an crafted HTML document or encoded URL, provided the user has an acti...