CVE-2020-10540by Jeremyin Uncategorizedon Posted on March 13, 2020 Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.