CVE-2022-1810

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-1810
Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

4.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://github.com/publify/publify/commit/c0aba87844d1e47da50c0d99a3465164a4d244ce Patch Third Party Advisory
https://huntr.dev/bounties/9b2d7579-032e-42da-b736-4b10a868eacb Exploit Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*
History

29 Jun 2023, 09:15

Type Values Removed Values Added
Summary Improper Access Control in GitHub repository publify/publify prior to 9.2.9. Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

27 Jun 2023, 16:17

Type Values Removed Values Added
CWE CWE-732 CWE-639
Information

Published : 2022-05-23 12:16

Updated : 2023-06-29 09:15

NVD link : CVE-2022-1810

Mitre link : CVE-2022-1810

JSON object : View

Products Affected

publify_project

  • publify
CWE
CWE-639

Authorization Bypass Through User-Controlled Key