CVE-2022-3674: falha de alta gravidade em SourceCodester Sanitization Management System
SourceCodester Sanitization Management System missing authentication
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.6%
A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The identifier VDB-212017 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Sanitization Management SystemCVEs relacionadas — SourceCodester Sanitization Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2022-3504MEDIUMSourceCodester Sanitization Management System sql injectionEPSS 0.8%CVE-2022-3942MEDIUMSourceCodester Sanitization Management System cross site scriptingEPSS 0.7%CVE-2022-3518LOWSourceCodester Sanitization Management System User Creation cross site scriptingEPSS 0.7%CVE-2022-3505LOWSourceCodester Sanitization Management System cross site scriptingEPSS 0.6%CVE-2022-3868MEDIUMSourceCodester Sanitization Management System sql injectionEPSS 0.6%CVE-2022-3992LOWSourceCodester Sanitization Management System Banner Image cross site scriptingEPSS 0.5%
Referências
https://vuldb.com/?id.212017