Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function.

Published Sep 15, 2020 · Updated Jul 9, 2026 · Assigned by mitre