Threats tagged 'ghsa-4rqm-5495-h9jx'

REDAXO versions before 5.21.3 have a cross-site request forgery (CSRF) vulnerability in the backend user administration page. The CSRF token check is only enforced when the save parameter is set, but the update path triggered by FUNC_UPDATE bypasses this check. This allows attackers to trick logged-in backend users with the users[] permission into performing unauthorized actions such as granting administrator rights, deactivating accounts, or locking out the sole administrator via crafted GET requests.