CVE-2017-11680

Publication date

2017-07-27 06:00:00

Family

mitre

State

PUBLISHED

Description

Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.