Lucene search

@huntrdevCVE-2022-3754

HistoryOct 29, 2022 - 1:15 p.m.

CVE-2022-3754

2022-10-2913:15:09

CWE-521

@huntrdev

web.nvd.nist.gov

cve-2022-3754

weak password requirements

github repository

thorsten

phpmyfaq

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

57.1%

JSON

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Affected configurations

Nvd

Node

phpmyfaqphpmyfaqRange<3.1.8

VendorProductVersionCPE
phpmyfaqphpmyfaq*cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyfaq	phpmyfaq	*	cpe:2.3:a:phpmyfaq:phpmyfaq::::::::

CNA Affected

[
  {
    "vendor": "thorsten",
    "product": "thorsten/phpmyfaq",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.1.8",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/thorsten/phpmyfaq/commit/d7a87d2646287828c70401ca8976ef531fbc77ea

huntr.dev/bounties/f4711d7f-1368-48ab-9bef-45f32e356c47

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

57.1%

JSON

Related for CVE-2022-3754