Lucene search

[email protected]CVE-2022-30014

HistoryMay 23, 2022 - 4:16 p.m.

CVE-2022-30014

2022-05-2316:16:07

CWE-352

[email protected]

web.nvd.nist.gov

cve-2022-30014

lumidek associates

simple food website

csrf

cross site request forgery

admin takeover

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.

Affected configurations

NVD

Node

simple_food_website_projectsimple_food_websiteMatch1.0

CPENameOperatorVersion
simple_food_website_project:simple_food_websitesimple food website project simple food websiteeq1.0

CPE	Name	Operator	Version
simple_food_website_project:simple_food_website	simple food website project simple food website	eq	1.0

References

lumidek.com

simple.com

github.com/offsecin/bugsdisclose/blob/main/csrf

Social References

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

Related for CVE-2022-30014

cvelist1 cnvd1 nvd1 prion1