CVE-2018-8979

Open-Audit Professional 2.1 is documented to be vulnerable to Cross-Site Request Forgery (CSRF). The Open-AuditIT product (Professional 2.1) can be affected via a CSRF flaw that allows an attacker to modify a user account and, with chaining to XSS, compromise authentication context. Public refere...