CVE-2020-9341

CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-02-22

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Candidats (Auieo)

References

• https://github.com/J3rryBl4nks/CandidATS/blob/master/AddAdminUserCSRF.md