CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-02-22T21:50:41
Updated: 2024-08-04T10:26:16.073Z
Reserved: 2020-02-22T00:00:00
Link: CVE-2020-9341
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-02-22T22:15:11.280
Modified: 2024-11-21T05:40:26.803
Link: CVE-2020-9341
Redhat
No data.