Enhancement: cves/2022/CVE-2022-47003.yaml by md
parent
34e08aad22
commit
47551cfdbd
|
@ -1,16 +1,16 @@
|
|||
id: CVE-2022-47003
|
||||
|
||||
info:
|
||||
name: Mura CMS - Authentication Bypass
|
||||
name: Mura CMS <10.0.580 - Authentication Bypass
|
||||
author: iamnoooob,rootxharsh,pdresearch
|
||||
severity: critical
|
||||
description: |
|
||||
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.
|
||||
Mura CMS before 10.0.580 is susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
|
||||
reference:
|
||||
- https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
|
||||
- http://mura.com
|
||||
- https://www.murasoftware.com/mura-cms/
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
|
@ -67,3 +67,5 @@ requests:
|
|||
internal: true
|
||||
regex:
|
||||
- '"lastupdatebyid":"([A-F0-9-]+)"'
|
||||
|
||||
# Enhanced by md on 2023/04/10
|
||||
|
|
Loading…
Reference in New Issue