Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb prior to 7.0.4 allows remote malicious users to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
webgroupmedia cerb |