CVE-2019-13370

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator...

CVE-2019-13370

CVE-2019-13370 is an Ignited CMS CSRF risk affecting the endpoint at /index.php/admin/permissions, exploitable to add an administrator. The Red Hat/CNVD/PT-Security entries confirm that the issue exists in Ignited CMS versions prior to 2017-02-19, stemming from insufficient origin/authentication ...