FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-02-16T04:00:00
Updated: 2024-08-05T06:24:11.235Z
Reserved: 2018-02-15T00:00:00
Link: CVE-2018-7176
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-02-16T04:29:00.523
Modified: 2018-03-14T18:09:44.520
Link: CVE-2018-7176
Redhat
No data.