CVE-2018-12659

2018-06-2215:29:00

Google

osv.dev

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.

CPENameOperatorVersion
slims8_akasiaeq8.3.1

CPE	Name	Operator	Version
	slims8_akasia	eq	8.3.1

References

github.com/slims/slims8_akasia/issues/103