CVE-2021-3932

Twill (Laravel-based CMS toolkit) is affected by a Cross-Site Request Forgery (CSRF) vulnerability identified as CVE-2021-3932. The vulnerability stems from using GET requests in the login/authentication flow instead of POST, enabling CSRF attacks that can be triggered by an attacker within a use...