Cross-site Request Forgery (CSRF)

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the 2fa management process. An attacker can disable two-factor authentication for a logged-in user by enticing them to follow a crafted link,...

CVE-2026-53628

GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Update auth, sync and 2FA right can change the authentication method and disable two-factor authentication for user accounts outside the administrator'...

CVE-2022-31886: Cross-Site Request Forgery (CSRF)

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery CSRF. An attacker can disable the 2FA by sending the user a malicious form...

PT-2022-20974

Name of the Vulnerable Software and Affected Versions Marval MSM version 14.19.0.12476 Description The issue allows an attacker to perform a Cross Site Request Forgery CSRF attack, which can be used to disable 2FA by sending a malicious form to the user. Recommendations For Marval MSM version...