CVE-2022-41474

Name of the Vulnerable Software and Affected Versions RPCMS version 3.0.2

Description The issue allows attackers to arbitrarily change the password of any account due to a Cross-Site Request Forgery (CSRF). This means an attacker can trick a user into performing unintended actions on the web application.

Recommendations For RPCMS version 3.0.2, consider implementing proper CSRF token validation to prevent unauthorized password changes. As a temporary workaround, restrict access to password change functionality until a proper fix is applied.