A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.

Published Dec 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre