CVE-2022-1810

CRITICAL

9.9

CVSS 3.0

Description

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CVE ID: CVE-2022-1810
State: PUBLISHED
Assigner: @huntrdev
Reserved: 2022-05-22 00:00 UTC
Published: 2022-05-23 00:00 UTC
Last updated: 2024-08-03 00:16 UTC
Primary CWE: CWE-639
CWE-639 Authorization Bypass Through User-Controlled Key
Vendor / Product: publify / publify/publify
Sources: cve.org · NVD

9.9 CRITICAL CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
publify	publify/publify	—	unspecified < 9.2.9

Weakness (CWE)

CWE	Source	Description
CWE-639	cna	CWE-639 Authorization Bypass Through User-Controlled Key

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

References (2)