PT-2020-12867

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The protection mechanism in place to prevent CSRF attacks can be bypassed by an attacker using another user's valid form session token value. This allows the attacker to perform a CSRF attack, potentially...