Security Advisory

CVE-2020-26522

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-09 06:44:27
Last updated 2024-08-04 15:56:04
Assigner mitre
State PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.