Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).

Published Feb 11, 2019 · Updated Aug 5, 2024 · Assigned by mitre