system
Describe <CVE-2020-27997>.
user
What is <CVE-2020-27997>?
assistant
An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account)..