GHSA-4vrc-q7m6-vq7w

Suggest an improvement
Source
https://github.com/advisories/GHSA-4vrc-q7m6-vq7w
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-4vrc-q7m6-vq7w/GHSA-4vrc-q7m6-vq7w.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-4vrc-q7m6-vq7w
Aliases
  • CVE-2022-44244
Published
2022-11-10T12:01:09Z
Modified
2024-02-20T05:25:53.878439Z
Severity
  • 6.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Lin CMS vulnerable to Improper Authentication
Details

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.

Database specific 
{
    "github_reviewed_at": "2022-11-22T00:18:48Z",
    "nvd_published_at": "2022-11-09T22:15:00Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-287"
    ],
    "severity": "MODERATE"
}
References

Affected packages

PyPI / lin-cms

Package

Name
lin-cms
View open source insights on deps.dev
Purl
pkg:pypi/lin-cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
0.2.1

Affected versions

0.*
0.1.1a1
0.1.1a2
0.1.1a3
0.1.1a4
0.1.1a5
0.1.1a6
0.1.1a7
0.1.1a8
0.1.1b1
0.1.1b2
0.1.1b3
0.1.1b4
0.2.0b1
0.2.0b2
0.2.0b3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-4vrc-q7m6-vq7w/GHSA-4vrc-q7m6-vq7w.json"

Maven / io.github.talelin:lin-cms-core

Package

Name
io.github.talelin:lin-cms-core
View open source insights on deps.dev
Purl
pkg:maven/io.github.talelin/lin-cms-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
0.2.1

Affected versions

0.*
0.0.1-RC1
0.0.1-RC2
0.0.1-RC3
0.0.1-RC4
0.0.1-RC5
0.0.1-RC6
0.1.0-RELEASE
0.1.1-RC1
0.1.1-RC2
0.1.1-RC3
0.2.0-RC1
0.2.0-RC2
0.2.0-RELEASE

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-4vrc-q7m6-vq7w/GHSA-4vrc-q7m6-vq7w.json"