CVE-2019-8437

njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...

CVE-2019-8437

The CVE concerns njiandan-cms with a CSRF vulnerability in the index.php/admin/user_new endpoint, allowing an attacker to add an administrator. The NVD entry (CVE-2019-8437) notes exploitation via this CSRF path and provides CVSS metrics (v2: 6.8 MEDIUM; v3: 8.8 HIGH) indicating impact to confide...