Unrated
iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
CVE-2019-15128
First seen on SecPulse
References
- report zeroauth.ltd