Lucene search

GoogleOSV:CVE-2022-2820

HistoryAug 15, 2022 - 11:21 a.m.

CVE-2022-2820

2022-08-1511:21:31

Google

osv.dev

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.

CPENameOperatorVersion
namelesseq2.0.0-pr5
namelesseq2.0.0-pr9
namelesseq2.0.0-pr10
namelesseq2.0.0-pr13
namelesseq2.0.0-pr8
namelesseq2.0.0-pr7
namelesseq2.0.0-pr12
namelesseq2.0.0-pr1
namelesseq2.0.0-pr11
namelesseq2.0.0-pr6

Name	Operator	Version
nameless	eq	2.0.0-pr5
nameless	eq	2.0.0-pr9
nameless	eq	2.0.0-pr10
nameless	eq	2.0.0-pr13
nameless	eq	2.0.0-pr8
nameless	eq	2.0.0-pr7
nameless	eq	2.0.0-pr12
nameless	eq	2.0.0-pr1
nameless	eq	2.0.0-pr11
nameless	eq	2.0.0-pr6

Rows per page:

1-10 of 151

References

github.com/namelessmc/nameless/commit/469bebc17855720e43f0c8209c88a57d2b55f6de

huntr.dev/bounties/df06b7d7-6077-43a5-bd81-3cc66f0d4d19

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

Related for OSV:CVE-2022-2820