CVE-2023-31200

PTC Vuforia Studio does not require a token; this could allow an
attacker with local access to perform a cross-site request forgery
attack or a replay attack.

Source: CVE-2023-31200