CVE-2018-13040

Name of the Vulnerable Software and Affected Versions OpenSID version 18.06-pasca

Description The issue allows an attacker to add an account at the admin level. This is achieved via the "index.php/man user/insert" API endpoint.

Recommendations For OpenSID version 18.06-pasca, consider restricting access to the "index.php/man user/insert" API endpoint to prevent unauthorized account additions until a fix is available.