CVE-2021-37394

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration

published July 26, 2021

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01171 · 67.2th percentile
Published
2021-07-26T17:07Z
EPSS history
Timeline
  • 26 JUL 17:07Z
    In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration
    cvelistv5