VULNERABILITY INTELLIGENCE

CVE-2012-6562

CVSS score6.8 MEDIUM

EPSS probability1.34%

CISA KEVNot currently listed

Published2013-05-23

Last modified2026-06-16

Description

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.