high8.8
CVE-2018-12659
SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.
Impact
SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slims Akasia Project | Slims Akasia | Version 8.3.1 |