CVE-2020-20595

Summary: CVE-2020-20595 is a CSRF vulnerability in OPMS v1.3 and earlier. The flaw allows an attacker to abusively add user accounts via /user/add. The underlying issue is cross-site request forgery without sufficient protections, enabling account creation without proper authorization. Public ref...