CVE-2018-12659

SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrftoken parameter...

CVE-2018-12659

CVE-2018-12659 affects SLiMS 8 Akasia 8.3.1. The issue is a CSRF protection bypass where an attacker can obtain administrator access by omitting the csrf_token parameter. The root cause is the failure to enforce CSRF token verification, allowing remote exploitation. Documented impacts include adm...