CVE-2018-16416

Cross-site request forgery CSRF vulnerability in myprofile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password...

CVE-2018-16416

Cross-site request forgery CSRF vulnerability in myprofile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password...

CVE-2018-16416

Cross-site request forgery CSRF vulnerability in myprofile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password...

CVE-2018-16416

The CVE-2018-16416 issue affects FUEL CMS 1.4, specifically a Cross-Site Request Forgery flaw in the my_profile/edit?inline= path. The underlying problem is CSRF that lets an attacker remotely change the administrator password. Connected records (Red Hat, CNVD, OSV, CVE lists) corroborate the sam...