Threats tagged 'ghsa-qm2h-8p28-f32f'

A Cross-Site Request Forgery (CSRF) vulnerability in SourceCodester Client Database Management System 1.0 allows an attacker to trick an authenticated administrative user into unintentionally deleting user accounts. The vulnerability exists because the user deletion endpoint does not enforce anti-CSRF tokens or verify request origin, enabling remote attackers to craft malicious requests that execute with the admin's privileges.