CVE-2018-16338

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-09-02

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Auracms (Auracms)

References

• https://github.com/auracms/AuraCMS/issues/3