RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/ralap-z/rpcms/issues/3 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-13T00:00:00
Updated: 2024-08-03T12:42:46.271Z
Reserved: 2022-09-26T00:00:00
Link: CVE-2022-41474
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-10-13T14:15:10.630
Modified: 2022-10-14T14:35:19.723
Link: CVE-2022-41474
Redhat
No data.