NetSight
high8.8

CVE-2018-20780

Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).

Impact

Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).

Affected products

VendorProductAffected versions
TraqTraq
Version 3.7.1

Weakness classification

References