CVE-2013-2713: Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows rem...

Security readout for executives and security teams

This flaw lets an attacker trick a logged-in KrisonAV CMS administrator into unintentionally creating a new user account. It affects KrisonAV CMS before 3.0.2. The business risk is unauthorized account creation if an administrator is targeted while authenticated. Exposure is likely limited to organizations still running KrisonAV CMS versions earlier than 3.0.2, especially where administrator sessions are reachable through normal browser use. Prioritize remediation if KrisonAV CMS is still deployed. The issue can create unauthorized users through administrator interaction, but the supplied evidence does not show active exploitation or broad modern exposure. Mitigation focus: Upgrade KrisonAV CMS to version 3.0.2 or later if still in use.; Check KrisonAV release notes or vendor guidance for the exact fixed version.; Restrict administrator access to trusted networks or VPN where feasible..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.