CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user...

CVE-2018-17986

CVE-2018-17986 affects razorCMS 3.4.8. The vulnerability is a Cross-Site Request Forgery (CSRF) in the rars/user/data page that allows changing the password of an admin user. No exploitation details are provided in the connected documents. Impact is described by multiple sources as enabling passw...