Files
CVEs-PoC/2020/CVE-2020-27997.md
T
2024-05-25 21:48:12 +02:00

711 B

CVE-2020-27997

Description

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account).

POC

Reference

Github

No PoCs found on GitHub currently.