daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2022/CVE-2022-47003.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-04-10 14:22:47 -04:00
parent 34e08aad22
commit 47551cfdbd
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/2022/CVE-2022-47003.yaml
View File

@ -1,16 +1,16 @@
id: CVE-2022-47003 id: CVE-2022-47003
info: info:
name: Mura CMS - Authentication Bypass name: Mura CMS <10.0.580 - Authentication Bypass
author: iamnoooob,rootxharsh,pdresearch author: iamnoooob,rootxharsh,pdresearch
severity: critical severity: critical
description: | description: |
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request. Mura CMS before 10.0.580 is susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
reference: reference:
- https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html - https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
- http://mura.com - http://mura.com
- https://www.murasoftware.com/mura-cms/ - https://www.murasoftware.com/mura-cms/
- https://nvd.nist.gov/vuln/detail/CVE-2022-47003
classification: classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8 cvss-score: 9.8
@ -67,3 +67,5 @@ requests:
internal: true internal: true
regex: regex:
- '"lastupdatebyid":"([A-F0-9-]+)"' - '"lastupdatebyid":"([A-F0-9-]+)"'
# Enhanced by md on 2023/04/10