← Database

CVE-2022-43340

HIGH CVSS: 8.8 Published: 2022-10-27 Modified: 2026-07-09

Description

A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.

Affected Platforms

Dzzoffice Dzzoffice

Weakness Type

CWE-352, CWE-352

References