CVE-2019-19832

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2019-19832

CVE-2019-19832 affects Xerox AltaLink C8035 printers and is due to a Cross-Site Request Forgery (CSRF) flaw in the Web application. The vulnerability allows an attacker to trigger a request to add users via the xerox.set URI in the Device User Database form, requiring that the frmUserName value b...