CVE-2017-11680
Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.
CVSS 3.0 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products