CVE-2018-17102

An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-09-16

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Quickapps Cms (Quickappscms)

References

• https://github.com/quickapps/cms/issues/187
• https://github.com/quickapps/cms/issues/199