CVE-2018-19545

Monday, November 26, 2018

N/A

N/A

Summary

JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.

Affected Software

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Weaknesses

n/a

ADP Enrichment

CVE Program Container

Additional References

https://github.com/toiron/setest/blob/c72808234498ade31990785d11ee2734738068c4/jeecmsaddusertest.html

References

https://github.com/toiron/setest/blob/c72808234498ade31990785d11ee2734738068c4/jeecmsaddusertest.html

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.