Skip to content

Insufficient CSRF check for delete actions

While Edit actions are protected correctly, delete actions in ISPConfig were not protected against CSRF attacks.

This issue has been reported to us by RACK911 LABS.