CVE-2020-23451

Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function. Date published : 2020-09-15 http://spiceworks.com

https://abuyv.com/cve/spiceworks-csrf-via-xss