CVE-2020-27997

Published: 2021-02-19T23:15Z

Last Modified: 2024-11-21T05:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt