Skip to content

CVE-2017-7571 public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.

HighCVSS 8.0 EPSS 2.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.

Affected products

ProductAffected versionsFixed in
ladybirdweb faveo helpdesk = 1.9.3 No fix listed

References

  • rungga.blogspot.co.id exploit technical-description third-party-advisory
  • 97493 third-party-advisory vdb-entry
  • github.com exploit technical-description third-party-advisory
  • 41830 exploit third-party-advisory vdb-entry