Description

Critical account takeover and privilege escalation vulnerability allow a low privilege user to take over admin account by using change password functionality.

In a normal user, select change password

Change the user ID to 1 as it is the admin account user ID

Admin account is taken over immediately