CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CVE-2018-17387 affects Nimble Messaging Bulk SMS Marketing Application 1.0. The issue is a Cross-Site Request Forgery (CSRF) that enables adding an admin account. CVSS3 base score 8.8 (HIGH) with NETWORK attack vector, UI required, and HIGH impact on confidentiality, integrity, and availability. ...