Naresh Bavaskar

**Name of the Vulnerable Software and Affected Versions** Ray Enterprise Translation versions 0.0.0 through 4.0.4 Ray Enterprise Translation versions 4.1.0 through 4.1.4 Ray Enterprise Translation versions 11.0.0 through 11.0.4 **Description** Cross-Site Request Forgery (CSRF) occurs when a module fails to protect state-changing administrative routes. This allows an attacker to trick a privileged user into visiting a crafted page to trigger unauthorized actions, such as updating callback settings, uploading or downloading translations, or changing translation state. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.