Cross-Site Request Forgery (CSRF)

yetiforce/yetiforce-crm is vulnerable to cross-site request forgery. The vulnerability exists in PasswordModalFooter.tpl, allowing a malicious attacker to log out a user as if the authenticated user visits the attacker's website...