CVE-2018-7733 An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
HighCVSS 8.8
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yxtcmf | <= 3.1 | No fix listed |
References
- github.com exploit third-party-advisory