Lucene search

K
cve[email protected]CVE-2022-32320
HistoryJul 17, 2022 - 5:15 p.m.

CVE-2022-32320

2022-07-1717:15:08
CWE-352
web.nvd.nist.gov
62
13
cve-2022-32320
cross-site request forgery
csrf
ferdi
ferdium
file reading
security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.4%

A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.

Affected configurations

NVD
Node
ferdiumferdiumMatch6.0.0-
OR
ferdiumferdiumMatch6.0.0beta1
OR
ferdiumferdiumMatch6.0.0beta2
OR
ferdiumferdiumMatch6.0.0beta3
OR
ferdiumferdiumMatch6.0.0nightly1
OR
ferdiumferdiumMatch6.0.0nightly10
OR
ferdiumferdiumMatch6.0.0nightly11
OR
ferdiumferdiumMatch6.0.0nightly12
OR
ferdiumferdiumMatch6.0.0nightly13
OR
ferdiumferdiumMatch6.0.0nightly14
OR
ferdiumferdiumMatch6.0.0nightly15
OR
ferdiumferdiumMatch6.0.0nightly16
OR
ferdiumferdiumMatch6.0.0nightly17
OR
ferdiumferdiumMatch6.0.0nightly18
OR
ferdiumferdiumMatch6.0.0nightly19
OR
ferdiumferdiumMatch6.0.0nightly2
OR
ferdiumferdiumMatch6.0.0nightly20
OR
ferdiumferdiumMatch6.0.0nightly21
OR
ferdiumferdiumMatch6.0.0nightly22
OR
ferdiumferdiumMatch6.0.0nightly23
OR
ferdiumferdiumMatch6.0.0nightly24
OR
ferdiumferdiumMatch6.0.0nightly25
OR
ferdiumferdiumMatch6.0.0nightly26
OR
ferdiumferdiumMatch6.0.0nightly27
OR
ferdiumferdiumMatch6.0.0nightly28
OR
ferdiumferdiumMatch6.0.0nightly29
OR
ferdiumferdiumMatch6.0.0nightly3
OR
ferdiumferdiumMatch6.0.0nightly30
OR
ferdiumferdiumMatch6.0.0nightly31
OR
ferdiumferdiumMatch6.0.0nightly32
OR
ferdiumferdiumMatch6.0.0nightly33
OR
ferdiumferdiumMatch6.0.0nightly34
OR
ferdiumferdiumMatch6.0.0nightly35
OR
ferdiumferdiumMatch6.0.0nightly36
OR
ferdiumferdiumMatch6.0.0nightly37
OR
ferdiumferdiumMatch6.0.0nightly38
OR
ferdiumferdiumMatch6.0.0nightly39
OR
ferdiumferdiumMatch6.0.0nightly4
OR
ferdiumferdiumMatch6.0.0nightly40
OR
ferdiumferdiumMatch6.0.0nightly41
OR
ferdiumferdiumMatch6.0.0nightly42
OR
ferdiumferdiumMatch6.0.0nightly43
OR
ferdiumferdiumMatch6.0.0nightly44
OR
ferdiumferdiumMatch6.0.0nightly45
OR
ferdiumferdiumMatch6.0.0nightly46
OR
ferdiumferdiumMatch6.0.0nightly47
OR
ferdiumferdiumMatch6.0.0nightly48
OR
ferdiumferdiumMatch6.0.0nightly49
OR
ferdiumferdiumMatch6.0.0nightly5
OR
ferdiumferdiumMatch6.0.0nightly50
OR
ferdiumferdiumMatch6.0.0nightly51
OR
ferdiumferdiumMatch6.0.0nightly52
OR
ferdiumferdiumMatch6.0.0nightly53
OR
ferdiumferdiumMatch6.0.0nightly54
OR
ferdiumferdiumMatch6.0.0nightly55
OR
ferdiumferdiumMatch6.0.0nightly56
OR
ferdiumferdiumMatch6.0.0nightly57
OR
ferdiumferdiumMatch6.0.0nightly58
OR
ferdiumferdiumMatch6.0.0nightly59
OR
ferdiumferdiumMatch6.0.0nightly6
OR
ferdiumferdiumMatch6.0.0nightly60
OR
ferdiumferdiumMatch6.0.0nightly61
OR
ferdiumferdiumMatch6.0.0nightly62
OR
ferdiumferdiumMatch6.0.0nightly63
OR
ferdiumferdiumMatch6.0.0nightly65
OR
ferdiumferdiumMatch6.0.0nightly66
OR
ferdiumferdiumMatch6.0.0nightly67
OR
ferdiumferdiumMatch6.0.0nightly69
OR
ferdiumferdiumMatch6.0.0nightly7
OR
ferdiumferdiumMatch6.0.0nightly70
OR
ferdiumferdiumMatch6.0.0nightly71
OR
ferdiumferdiumMatch6.0.0nightly72
OR
ferdiumferdiumMatch6.0.0nightly73
OR
ferdiumferdiumMatch6.0.0nightly74
OR
ferdiumferdiumMatch6.0.0nightly76
OR
ferdiumferdiumMatch6.0.0nightly77
OR
ferdiumferdiumMatch6.0.0nightly78
OR
ferdiumferdiumMatch6.0.0nightly79
OR
ferdiumferdiumMatch6.0.0nightly8
OR
ferdiumferdiumMatch6.0.0nightly80
OR
ferdiumferdiumMatch6.0.0nightly81
OR
ferdiumferdiumMatch6.0.0nightly82
OR
ferdiumferdiumMatch6.0.0nightly83
OR
ferdiumferdiumMatch6.0.0nightly84
OR
ferdiumferdiumMatch6.0.0nightly85
OR
ferdiumferdiumMatch6.0.0nightly86
OR
ferdiumferdiumMatch6.0.0nightly87
OR
ferdiumferdiumMatch6.0.0nightly88
OR
ferdiumferdiumMatch6.0.0nightly89
OR
ferdiumferdiumMatch6.0.0nightly9
OR
ferdiumferdiumMatch6.0.0nightly90
OR
ferdiumferdiumMatch6.0.0nightly91
OR
ferdiumferdiumMatch6.0.0nightly92
OR
ferdiumferdiumMatch6.0.0nightly93
OR
ferdiumferdiumMatch6.0.0nightly94
OR
ferdiumferdiumMatch6.0.0nightly95
OR
ferdiumferdiumMatch6.0.0nightly96
OR
ferdiumferdiumMatch6.0.0nightly97
OR
ferdiumferdiumMatch6.0.0nightly98
OR
getferdiferdiRange5.8.1

Social References

More

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.4%

Related for CVE-2022-32320