CVE-2022-41475

HIGH 8.8EPSS 0.4%

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator account.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 0.40% chance of exploitation in the next 30 days, 33th percentile
Published: 2022-10-13
Updated: 2025-05-15

Proof-of-concept exploits (1)

ralap-z/rpcms/issues/2

References

Related