Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easi...

参照URL

• advisory github.com
• advisory nvd.nist.gov
• web bugs.launchpad.net
• web mahara.org