high8.8
CVE-2018-19555
tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
Impact
tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp4a | Teleport | Version 3.1.0 |