CVE-2018-16416

2018-09-0319:29:01

Google

osv.dev

AI Score

7.1

Confidence

High

EPSS

0.009

Percentile

82.6%

JSON

Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator’s password.

References

www.iwantacve.cn/index.php/archives/48/

github.com/daylightstudio/FUEL-CMS/issues/481