CVE-2020-25562 – In SapphireIMS 5.0, there is no CSRF token present in the entire applicat

4 years ago

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25562

Reference (s):

https://vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf/
https://vuln.shellcoder.party/tags/sapphireims/