Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-0524
HistoryFeb 08, 2022 - 10:00 p.m.

CVE-2022-0524 Business Logic Errors in publify/publify

2022-02-0822:00:17
CWE-840
@huntrdev
www.cve.org
cve-2022-0524
business logic errors
publify/publify
github repository
prior to 9.2.7

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.5%

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

CNA Affected

[
  {
    "product": "publify/publify",
    "vendor": "publify",
    "versions": [
      {
        "lessThan": "9.2.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.5%

Related for CVELIST:CVE-2022-0524