writeups.xyz / LedgerSMB – CVE-2024-23831: Privilege escalation through CSRF attack on “setup.pl”

Submitter : c2a

Date: 2 February 2024

Bounty : undisclosed

Vulnerabilities :

• CSRF

Programs :

• LedgerSMB

Authors :

• George Roumeliotis

Link :
https://twelvesec.com/2024/02/02/cve-2024-23831/