CVE-2020-26802

Published: 2020-10-08T17:15Z

Last Modified: 2024-11-21T05:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET request to change the admin email address in order to accomplish an account takeover. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt