CVE-2020-25562

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0

Description: The issue is related to the absence of a CSRF token in the entire application, which can lead to CSRF vulnerabilities in critical application forms, such as account reset.

Recommendations: For SapphireIMS version 5.0, consider implementing CSRF tokens in all forms to prevent cross-site request forgery attacks. As a temporary workaround, restrict access to critical application forms like account reset to minimize the risk of exploitation.