SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://seeddms.com | product |
https://tuhin1729.medium.com/cve-2021-26216-ffb33321dc91 | third party advisory exploit |