CVE-2022-46146

creationtimestamp| type| source ---|---|--- 2022-11-29 16:28:47+00:00| seen| https://t.me/cibsecurity/53643 2022-12-02 11:01:15+00:00| seen| https://t.me/CyberSecurityTechnologies/7281 2022-12-06 04:04:16+00:00| published-proof-of-concept| https://t.me/crackcodes/1619...

DEBIAN-CVE-2022-46146

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

CVE-2022-46146 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, prometheus-pushgateway-fips, kube-state-metrics...

CVE-2022-46146

CVE-2022-46146 affects Prometheus Exporter Toolkit prior to 0.7.2 and 0.8.2; attackers with access to the Prometheus web.yml and hashed passwords can poison the built-in authentication cache. A fix exists in 0.7.2 and 0.8.2. Attacker needs access to the hashed password to exploit. Upgrade to 0.7....

CVE-2022-46146 Prometheus Exporter Toolkit vulnerable to basic authentication bypass

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

CVE-2021-46146

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file...

CVE-2021-46146

MediaWiki (WikibaseMediaInfo) is affected by an XSS vulnerability in caption handling for media files. Affected versions are MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The issue is due to WikibaseMediaInfo processing caption fields insecurely, enabling XSS. No exploi...

MediaWiki < 1.35.5, 1.36.x < 1.36.3, 1.37.x < 1.37.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...