Security Advisory

CVE-2018-7733

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-06 18:00:00
Last updated 2024-09-17 00:25:35
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.