Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19280
Reference (s):
- https://github.com/zchuanzhao/jeesns/issues/9
- https://www.seebug.org/vuldb/ssvid-97938