In ERPNext, versions v11.0.0-beta through v13.0.2 are vulnerable to Missing Authorization, in the chat rooms functionality. A low privileged attacker can send a direct message or a group message to any member or group, impersonating themselves as the administrator. The attacker can also read chat messages of groups that they do not belong to, and of other users.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23055.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta18"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta19"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta20"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta22"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta23"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta26"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta27"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta29"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta30"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta31"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta32"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta33"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta34"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta36"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta37"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0.3-beta9"
}
]
}
]