CVE-2022-2651

🗓️ 04 Aug 2022 09:10:10Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 70 Views🌐 WEB

Authentication Bypass in GitHub repository bookwyrm-social/bookwyr

Reporter	Title	Published	Views	Family All 14
0day.today	Bookwyrm v0.4.3 - Authentication Bypass Vulnerability	20 Sep 202200:00	–	zdt
Huntr	Email Verification Bypass Leads To Account Takeover	12 Jul 202207:07	–	huntr
ATTACKERKB	CVE-2022-2651	4 Aug 202209:15	–	attackerkb
Circl	CVE-2022-2651	4 Aug 202212:19	–	circl
CNNVD	BookWyrm 安全漏洞	4 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm	4 Aug 202209:10	–	cvelist
Exploit DB	Bookwyrm v0.4.3 - Authentication Bypass	20 Sep 202200:00	–	exploitdb
EUVD	EUVD-2022-34897	4 Aug 202209:10	–	euvd
NVD	CVE-2022-2651	4 Aug 202209:15	–	nvd
OSV	CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm	4 Aug 202209:10	–	osv

NVD

Node

joinbookwyrm bookwyrmRange<0.4.5

[
  {
    "product": "bookwyrm-social/bookwyrm",
    "vendor": "bookwyrm-social",
    "versions": [
      {
        "lessThan": "0.4.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/428eee94-f1a0-45d0-9e25-318641115550
packetstormsecurity	www.packetstormsecurity.com/files/168423/Bookwyrm-0.4.3-Authentication-Bypass.html
github	www.github.com/bookwyrm-social/bookwyrm/commit/7bbe42fb30a79a26115524d18b697d895563c92f