Security Advisory

CVE-2017-9673

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-15 18:00:00
Last updated 2024-09-17 00:16:23
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.