CVE-2022-43340: CSRF

Published Oct 27, 2022

Updated

A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.

Affected Software

1 affected component

dzzoffice DzzOffice=2.02.1

Event History

Oct 27, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-43340?

The severity of CVE-2022-43340 is high with a severity value of 8.8.

What is CVE-2022-43340?

CVE-2022-43340 is a Cross-Site Request Forgery (CSRF) vulnerability in dzzoffice 2.02.1_SC_UTF8 that allows attackers to create user accounts and grant Administrator rights to regular users.

What software is affected by CVE-2022-43340?

The Dzzoffice software version 2.02.1 is affected by CVE-2022-43340.

How can an attacker exploit CVE-2022-43340?

An attacker can exploit CVE-2022-43340 by tricking a user into performing certain actions without their consent or knowledge.

Are there any references for CVE-2022-43340?

Yes, you can find references for CVE-2022-43340 at the following links: [http://dzzoffice.com](http://dzzoffice.com), [https://github.com/zyx0814/dzzoffice](https://github.com/zyx0814/dzzoffice), [https://github.com/zyx0814/dzzoffice/issues/223](https://github.com/zyx0814/dzzoffice/issues/223).