Hoosk · Hoosk · CVE-2018-7590
**Name of the Vulnerable Software and Affected Versions**
Hoosk version 1.7.0
**Description**
A CSRF issue exists, allowing for account creation via the "/admin/users/new/add" API endpoint.
**Recommendations**
For Hoosk version 1.7.0, as a temporary workaround, consider restricting access to the "/admin/users/new/add" API endpoint until a patch is available.