Description
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Sismics Teedy
Default version status: unknown
0 to ≤ 1.11affected