Cross-Site Request Forgery (CSRF)

drupal/core is vulnerable to cross-site request forgery CSRF attacks. The attacks exist because it does not use any CSRF protection for the system.runcron command. Depending on the type of command passed through this CSRF attack , this can also lead to a denial of service DoS attack...