Description
A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.
High · 8.8
CVE-2022-43340
EUVD-2022-46379GHSA-gjm6-3c4q-m6rg
A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrato…
Published Oct 27, 2022 · Updated Jul 9, 2026 · Assigned by mitre