CVE-2020-9341

CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI

published February 22, 2020

CVSS
—
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00598 · 48.0th percentile
Published
2020-02-22T21:50Z
EPSS history
Timeline
  • 22 FEB 21:50Z
    CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI
    cvelistv5