Cross site request forgery (csrf)

2018-08-0803:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a user.

CPENameOperatorVersion
onethinkeq1.1

CPE	Name	Operator	Version
	onethink	eq	1.1

References

github.com/liu21st/onethink/issues/36