A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
| Link | Tags |
|---|---|
| https://vtenext.com/en/ | product vendor advisory |
| https://sourceforge.net/projects/vtecrm/ | third party advisory product |
| https://www.exploit-db.com/exploits/48804 | exploit vdb entry third party advisory |