NVD CVE-2017-7571 April 6, 2017 007admin public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.