CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.
References
Link | Resource |
---|---|
https://github.com/havok89/Hoosk/issues/45 | Third Party Advisory |
Configurations
Information
Published : 2018-03-01 14:29
Updated : 2018-03-16 10:52
NVD link : CVE-2018-7590
Mitre link : CVE-2018-7590
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
hoosk
- hoosk