Cross site request forgery (csrf)

A CSRF issue in manager/deletemachine/id in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database...

CVE-2020-15882

CVE-2020-15882 is a CSRF vulnerability in MunkiReport’s manager/delete_machine/{id} endpoint, prior to version 5.6.3. The flaw enables an attacker to delete arbitrary machines from the MunkiReport database by exploiting lack of CSRF protection. Affected product/version: MunkiReport before 5.6.3. ...

PT-2020-14683

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 5.6.3 Description A CSRF issue in the "manager/delete machine/id" endpoint allows attackers to delete arbitrary machines from the MunkiReport database. Recommendations For versions prior to 5.6.3, update to versio...