CVE-2022-22733: vulnerability in Apache ShardingSphere ElasticJob-UI
Access-Token in ElasticJob UI causes password disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 38%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.
Affected products
Apache Software Foundation · Apache ShardingSphere ElasticJob-UIRelated CVEs — Apache ShardingSphere ElasticJob-UI
In the same product, most dangerous first.