Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-41474 EUVD-2022-44667GHSA-h49x-w352-2625

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any…

Published Oct 13, 2022 · Updated May 15, 2025 · Assigned by mitre

Description

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account.

References