CVE-2020-11682

Summary: Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing requests because a __RequestVerificationToken set by the web interface is not verified by the application, allowing removal of the token and successful requests. Affected component: Castel NextGen DVR web interface (v1...