high8.8
CVE-2019-15496
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack.
Impact
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manageyourteam | Myt Project Management | Version 1.5.1 |