Enhancement: cves/2022/CVE-2022-47003.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-04-10 14:22:47 -04:00
parent 34e08aad22
commit 47551cfdbd
1 changed files with 5 additions and 3 deletions

View File

@ -1,16 +1,16 @@
id: CVE-2022-47003
info:
name: Mura CMS - Authentication Bypass
name: Mura CMS <10.0.580 - Authentication Bypass
author: iamnoooob,rootxharsh,pdresearch
severity: critical
description: |
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.
Mura CMS before 10.0.580 is susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
reference:
- https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
- http://mura.com
- https://www.murasoftware.com/mura-cms/
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
@ -67,3 +67,5 @@ requests:
internal: true
regex:
- '"lastupdatebyid":"([A-F0-9-]+)"'
# Enhanced by md on 2023/04/10