Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password...