Lucene search
+L

4 matches found

NVD
NVD
added 2022/10/27 8:15 p.m.30 views

CVE-2022-43340

A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...

8.8CVSS0.0036EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/27 12:0 a.m.66 views

CVE-2022-43340

CVE-2022-43340 affects dzzoffice version 2.02.1_SC_UTF8 and is described in connected sources as a CSRF vulnerability that lets an attacker arbitrarily create user accounts and grant Administrator rights to regular users. The root cause is a cross-site request forgery flaw in the account creation...

8.8CVSS8.7AI score0.0036EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/10/27 12:0 a.m.13 views

CVE-2022-43340

A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...

8.8CVSS7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/10/27 12:0 a.m.37 views

CVE-2022-43340

A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...

9AI score0.0036EPSS
SaveExploits1References2
Rows per page
Query Builder