CVE-2019-7566

CSZ CMS 1.1.8 contains a CSRF vulnerability in the admin/users/new/add flow. Root cause: improper CSRF protection in the user-creation endpoint. Impact per CVSS3 is HIGH (C/H, I/H, A/H) with NETWORK attack vector, LOW attack complexity, NONE privileges, UI required; authenticated user interaction...

CVE-2019-7566: Cross-Site Request Forgery (CSRF)

CSZ CMS 1.1.8 has CSRF via admin/users/new/add...

PT-2019-18649

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.1.8 Description The issue is related to CSRF, which can be exploited via the admin/users/new/add endpoint. Recommendations For CSZ CMS version 1.1.8, consider implementing proper CSRF protection mechanisms, such as tokens, to...

PT-2018-18168

Name of the Vulnerable Software and Affected Versions Hoosk version 1.7.0 Description A CSRF issue exists, allowing for account creation via the "/admin/users/new/add" API endpoint. Recommendations For Hoosk version 1.7.0, as a temporary workaround, consider restricting access to the...

CVE-2018-7590: Cross-Site Request Forgery (CSRF)

CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation...