CVE-2012-6562

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary…

published May 23, 2013

CVSS
—
EPSS
1%
Percentile
70.9
In the wild
Unconfirmed
What it is

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01338 · 70.9th percentile
Published
2013-05-23T15:00Z
EPSS history
Timeline
  • 23 MAY 15:00Z
    engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary…
    cvelistv5