A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrator profile update functionality of CarRentalMS v2.0. The affected endpoint does not implement anti-CSRF protections, allowing an attacker to perform unauthorized profile modifications on behalf of an authenticated administrator via crafted HTML content.
scap3sh4rk/CVE-2025-66683
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|