An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable if any links and forms lack an unpredictable CSRF token. Without such a token, attackers can forge malicious requests, such as for adding Device Settings via the /addsrv URI.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25142
Reference (s):
- https://gist.github.com/ahpaleus/76aa81ec82644a89c2088ab3ea99f07c