CVE-2023-7038

Summary: CVE-2023-7038 affects automad up to 1.10.9. The issue is a CSRF vulnerability in the User Creation Handler, specifically processing of the file at /dashboard?controller=UserCollection::createUser. Root cause: automad does not implement anti-CSRF tokens by default, enabling remote exploit...