Description
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
Unscored
CVE-2021-37394
EUVD-2021-23963GHSA-mw56-m865-cmxm
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
Published Jul 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre