Cross site request forgery (csrf)

Cognitoys Dino devices allow profilesadd.html CSRF...

CVE-2017-18485

CVE-2017-18485 affects Cognitoys Dino devices. The connected records describe a cross-site request forgery (CSRF) in the device’s web UI (notably in profiles_add.html). The CNVD entry states the vulnerability stems from the web application not adequately verifying that a request comes from a trus...