| Package | Affected versions | Patched versions |
|---|---|---|
| krisonav | = 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.7= 1.0.0= 1.0.1= 1.0.2= 1.1.35= 2.0.1= 2.1.3= 2.1.5= 2.1.6= 3.0.0≤ 3.0.1 |
Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free