PT-2021-18176

Name of the Vulnerable Software and Affected Versions: Mahara version 20.10 Description: The issue allows a remote attacker to remove inbox-mail on the server due to a Cross Site Request Forgery CSRF vulnerability. The application fails to validate the CSRF token for a POST request. An attacker c...