CVE-2018-1000137

8.8 highEPSS 0.6%

High (8.8) in scilico i\, librarian. EPSS 0.6% chance of exploitation in the next 30 days.

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2018-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

scilico:i\,_librarian

References

https://github.com/mkucej/i-librarian/issues/121
https://github.com/mkucej/i-librarian/issues/121

Check your stack JSON