CVE-2020-14025

CVE-2020-14025 affects Ozeki NG SMS Gateway (up to version 4.17.6). The issue is described as multiple CSRF vulnerabilities that allow an authenticated or indirectly authenticated attacker to trigger admin actions (e.g., install modules, change passwords) by convincing a user to follow a link. Th...