CVE-2021-29238

CVE-2021-29238 affects CODESYS Automation Server prior to version 1.16.0. The flaw is a cross-site request forgery (CSRF) vulnerability that can allow an attacker to perform authenticated actions on behalf of a user; in wild exposures the THN report describes scenarios leading to elevated privile...