Lucene search

GoogleOSV:CVE-2022-1699

HistoryMay 12, 2022 - 4:15 p.m.

CVE-2022-1699

2022-05-1216:15:07

Google

osv.dev

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

CPENameOperatorVersion
organizreq1.01
organizreq0.9999
organizreq0.93
organizreq1.342
organizreq1.50
organizreq0.931
organizreq1.32
organizreq0.99997
organizreq0.999
organizreq0.997

Name	Operator	Version
organizr	eq	1.01
organizr	eq	0.9999
organizr	eq	0.93
organizr	eq	1.342
organizr	eq	1.50
organizr	eq	0.931
organizr	eq	1.32
organizr	eq	0.99997
organizr	eq	0.999
organizr	eq	0.997

Rows per page:

1-10 of 591

References

github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56

huntr.dev/bounties/3024b2bb-50ca-46a2-85db-1cc916791cda

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for OSV:CVE-2022-1699