high8.8
CVE-2021-21495
MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.
Impact
MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mk-Auth | Mk-Auth | through 19.01 |