NetSight
high8.8

CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

Impact

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

Affected products

VendorProductAffected versions
RazorcmsRazorcms
Version 3.4.8

Weakness classification

References