A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job.Referenceshttps://privasec.com/blog/zentao-cms-a-monkeys-journey-to-priv-esc-remote-code-execution/