Lucene search

K
cveMitreCVE-2022-45276
HistoryNov 23, 2022 - 9:15 p.m.

CVE-2022-45276

2022-11-2321:15:11
CWE-425
mitre
web.nvd.nist.gov
26
4
cve-2022-45276
yjcms
security issue
unauthenticated access

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

71.0%

An issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password.

Affected configurations

Nvd
Node
eyunjingyjcmsMatch1.0.9
VendorProductVersionCPE
eyunjingyjcms1.0.9cpe:2.3:a:eyunjing:yjcms:1.0.9:*:*:*:*:*:*:*

Social References

More

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

71.0%

Related for CVE-2022-45276