Multiple vulnerabilities in multiple PHP Factory products

Overview Multiple products provided by PHP Factory contain multiple vulnerabilities listed below. Cross-site Request Forgery CWE-352 - CVE-2020-5615 Authentication bypass CWE-287 - CVE-2020-5616 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...