CVE-2022-4564

The CVE affects University of Central Florida Materia up to version 9.0.0, impacting the API Controller’s fuel/app/classes/controller/api.php, where the before function enables cross-site request forgery. Remote initiation is possible. Remediation is upgrading to 9.0.1-alpha1; the patch is af2591...