CVE-2021-37394
Published
CVSS v3
8.8
HIGH
CVSS v2
6
MEDIUM
Affected
1
PROJECT
Description
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
GitHub