CVE-2018-17429

/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.

Date published : 2019-03-07

https://github.com/jetiben/jtbc/issues/4