CVE-2022-44849: Metinfo

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account.

Affected products

• Metinfo Metinfo: version 7.7 only

Published 2022-12-07. Last modified 2026-06-17.