CVE-2018-17986

CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

Source: CVE-2018-17986