CVE-2020-23451

Publication date

2020-09-15 13:15:59

Family

mitre

State

PUBLISHED

Description

Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function.