high8.8
CVE-2021-37394
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
Impact
In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rpcms | Rpcms | through 1.8 |