CVE-2022-41474

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-10-13

Last modified

2025-05-15

Weaknesses

CWE-352

Affected products

• Rpcms (Rpcms)

References

• https://github.com/ralap-z/rpcms/issues/3