Cross-site Request Forgery (CSRF)

2020-05-1808:23:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

45.9%

JSON

intelliants/subrion is vulnerable to cross-site request forgery (CSRF). The vulnerability exists as it improperly invalidates the CSRF token for the panel/uploads/read.json GET request, potentially causing deletion of a file pass when the cmd=rm parameter value is set.