CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-10-05

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Razorcms (Razorcms)

References

• https://github.com/smiffy6969/razorCMS/issues/53