Description
Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally POST-based request can be converted to a GET request while still successfully updating user details. This allows an attacker to craft a malicious request that, when visited by an authenticated user, can modify user account information without their consent.
INFO
Published Date :
2026-04-21T00:00:00.000Z
Last Modified :
2026-04-21T18:21:08.828Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2026-31014 vulnerability.
| Vendors | Products |
|---|---|
| Dovestones |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-31014.
