Description
An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | elefant/cms | < 2.0.5 | 2.0.5 | GHSA-79m2-h67v-35q7 |
High · 8.8
CVE-2018-16387
EUVD-2022-2963GHSA-79m2-h67v-35q7
Elefant CMS CSRF Vulnerability
Published Sep 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre