CVE-2020-25562 – In SapphireIMS 5.0, there is no CSRF token present in the entire applicat

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25562

Reference (s):

• https://vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf/
• https://vuln.shellcoder.party/tags/sapphireims/