CVE-2021-36569

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2...

CVE-2021-36569

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2...

CVE-2021-36569

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2...

CVE-2021-36569

CVE-2021-36569 affects FUEL-CMS 1.4.13. It is a Cross Site Request Forgery vulnerability that enables remote attackers to execute arbitrary code via post ID to /users/delete/2. Root cause: CSRF in the API endpoint. Impact: high (C, I, A all High per CVSS 3.1). Exploitation indicators in connected...