openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15491.json"