CVE-2022-4766 – dolibarr_project_timesheet Form cross-site request forgery

https://notcve.org/view.php?id=CVE-2022-4766

A vulnerability was found in dolibarr_project_timesheet up to 4.5.5. It has been declared as problematic. This vulnerability affects unknown code of the component Form Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. • https://github.com/delcroip/dolibarr_project_timesheet/commit/082282e9dab43963e6c8f03cfaddd7921de377f4 https://github.com/delcroip/dolibarr_project_timesheet/pull/200 https://github.com/delcroip/dolibarr_project_timesheet/releases/tag/4.5.6.a https://vuldb.com/?ctiid.216880 https://vuldb.com/?id.216880 • CWE-352: Cross-Site Request Forgery (CSRF) •