Security Advisory

CVE-2015-6545

6.8

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Published Date September 3, 2015
Official Source NIST NVD Advisory