CVE-2018-20780

Publication date

2019-02-11 02:00:00

Family

mitre

State

PUBLISHED

Description

Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).