CVE-2021-41916

CVE-2021-41916 describes a CSRF vulnerability in webTareas up to version 2.4 where an attacker can create a new administrative profile and add a user without the victim’s knowledge by enticing an authenticated admin to visit a crafted page. This is driven by cross-site request forgery on authenti...