CVE-2018-8979: Open-Audit

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.

Affected products

• Open-Audit Open-Audit: version 2.1 only

Published 2018-03-25. Last modified 2026-06-17.