CVE-2022-26173

Published: 2022-06-16T22:15Z

Last Modified: 2024-11-21T06:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt