CVE-2018-12628

An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-07-10

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Eventum (Eventum Project)

References

• https://github.com/eventum/eventum/blob/master/CHANGELOG.md
• https://github.com/eventum/eventum/releases/tag/v3.5.2