Egyptian 16 year-old expert Mazen Gamal has found a vulnerability in Avira that could allow an attacker to take over the users account. The Avira website is affected by a CSRF (Cross-site request forgery) vulnerability that allows anto hijack users accounts and access to their online secure cloud backup files. Avira has reported the vulnerability to the Avira Security Team on August 21th, the team admitted the flaw and fixed the bug on their website, but the Secure online backup service is still vulnerable to hackers.”]
Source: https://securityaffairs.co/wordpress/28496/hacking/avira-csrf-flaw.html