CVE-2020-13157
CVE-2020-13157
This page contains facts from public vulnerability sources. Check the original advisory before updating.
modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed.
CVSS 6.5 · Medium · EPSS 0.6%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nukeviet/nukeviet Packagist
- Versions
- 4.4
No fix published