exploitDog

CVE-2022-44411

Опубликовано: 25 нояб. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack.

Ссылки

https://shimo.im/docs/5xkGMZx0ZeUmpx3X
Exploit
Mitigation
Third Party Advisory
https://shimo.im/docs/5xkGMZx0ZeUmpx3X
Exploit
Mitigation
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:web_based_quiz_system_project:web_based_quiz_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00138

Низкий

7.5 High

CVSS3

Дефекты

CWE-319

CWE-319

Связанные уязвимости

GHSA-g7h8-52f9-cj26

CVSS3: 7.5

github

около 3 лет назад

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack.

EPSS

Процентиль: 34%

0.00138

Низкий

7.5 High

CVSS3

Дефекты

CWE-319

CWE-319