CVE-2019-9958

Published: 2019-06-24T19:15Z

Last Modified: 2024-11-21T04:52Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt