An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to send API requests.
connectwise control 19.3.25270.7185