CVE-2020-20595

A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-12-22

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Opms (Opms Project)

References

• https://github.com/lock-upme/OPMS/issues/25