A CSRF issue exists in DAViCal up to and including 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests in the name of the user to the application. If the attacked user is an administrator, the attacker could for example add a new admin user.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
davical davical |
Vulmon