exploitDog

CVE-2022-2651

Опубликовано: 04 авг. 2022

Источник: nvd

CVSS3: 9.8

CVSS3: 9.8

EPSS Средний

Описание

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.

Ссылки

http://packetstormsecurity.com/files/168423/Bookwyrm-0.4.3-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/bookwyrm-social/bookwyrm/commit/7bbe42fb30a79a26115524d18b697d895563c92f
Patch
Third Party Advisory
https://huntr.dev/bounties/428eee94-f1a0-45d0-9e25-318641115550
Exploit
Patch
Third Party Advisory
http://packetstormsecurity.com/files/168423/Bookwyrm-0.4.3-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/bookwyrm-social/bookwyrm/commit/7bbe42fb30a79a26115524d18b697d895563c92f
Patch
Third Party Advisory
https://huntr.dev/bounties/428eee94-f1a0-45d0-9e25-318641115550
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joinbookwyrm:bookwyrm:*:*:*:*:*:*:*:*

Версия до 0.4.5 (исключая)

EPSS

Процентиль: 95%

0.16939

Средний

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-305

Связанные уязвимости

GHSA-mpr5-m5gh-62gw

CVSS3: 9.8

github

больше 3 лет назад

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.

EPSS

Процентиль: 95%

0.16939

Средний

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-305