CVE-2018-1000137 - I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge

Back Back to CVE browser

HIGH

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge

Published Mar 23, 2018

8.8

HIGH

CVSS 3.1

EPSS 0.57%

Description

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1855
Advisory
https://github.com/mkucej/i-librarian/issues/121
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1855		Advisory
https://github.com/mkucej/i-librarian/issues/121		x_refsource_MISCExploitIssue TrackingThird Party Advisory