Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00741·Published 2017-04-28·Fixed in v1.7.0CWE-352