CVE-2018-9856 | BDVDB-2026-99050 Detail

Description#

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Kotti/Kotti/issues/551

Exploit#

No public exploit known

History#

Version 12018-04-09Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.