VYPR
← All advisories
Unrated severityOSV Advisory· Published Apr 11, 2019· Updated Aug 4, 2024

CVE-2019-11077

CVE-2019-11077

Description

FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.

Affected products

2
  • Fastadmin/FastadminOSV2 versions
    v0.1.0.20170721_beta, v1.0.0.20170808_beta, v1.0.0.20170816_beta, …+ 1 more
    • (no CPE)range: v0.1.0.20170721_beta, v1.0.0.20170808_beta, v1.0.0.20170816_beta, …
    • (no CPE)range: = V1.0.0.20190111_beta

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.