CVE-2017-7446

Name of the Vulnerable Software and Affected Versions HelpDEZk version 1.1.1

Description The issue allows for obtaining admin privileges through CSRF in the "admin/home#/person/" endpoint.

Recommendations For HelpDEZk version 1.1.1, update to a version that includes a fix for this issue, as using the admin/home#/person/ endpoint can lead to admin privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.