CVE-2018-16431

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...

CVE-2018-16431

CVE-2018-16431 affects YFCMF v3.0. The vulnerability is a CSRF flaw in the admin/admin/adminsave.html endpoint that allows an attacker to add an administrator account. TheRoot cause involves insufficient CSRF protection on an admin-facing URL, enabling unauthorized privileged action without user ...