high8.8
CVE-2020-9341
CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
Impact
CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auieo | Candidats | Version 2.1.0 |