CVE-2018-7718

CVE-2018-7718 affects Telexy QPath 5.4.462 where a low-privileged, authenticated user can craft a serialized request to AdanitDataService.svc to modify e.g. email, username, or password of other accounts. The documented attack path suggests intercepting a password-change request and altering the ...