A vulnerability marked as problematic has been reported in diskover-community up to 2.3.5. Affected is an unknown function of the file public/settings_process.php. Performing a manipulation results in cross-site request forgery.
This vulnerability was named CVE-2026-38934. The attack may be initiated remotely. There is no available exploit.
