CVE-2022-3540

Опубликовано: 17 окт. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attacker to extract other users email addresses

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3540.json
Third Party Advisory
VDB Entry
https://gitlab.com/hunter2.app/hunter2/-/issues/529
Issue Tracking
Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3540.json
Third Party Advisory
VDB Entry
https://gitlab.com/hunter2.app/hunter2/-/issues/529
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hunter2_project:hunter2:*:*:*:*:*:*:*:*

Версия до 2.1.0 (исключая)

EPSS

Процентиль: 33%

0.00128

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

GHSA-86r4-gcfx-wv72