CVE-2020-12257

CVE-2020-12257 concerns rConfig 3.9.4, where a cross-site request forgery (CSRF) vulnerability exists due to missing CSRF protection (e.g., CSRF token). An attacker could craft requests to perform actions such as adding, deleting, or editing users. The connected sources consistently describe CSRF...