CVE-2022-1848

CRITICAL Year: 2022
CVSS v3 Score
9.0
Critical
CVSS v2 Score
4.3
Medium

Vulnerability Description

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

CVSS:8.8(High)

Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ character. This domain is ...

CVSS:8.8(High)

Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space developer permission...

CVSS:8.8(High)

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.

CVSS:8.8(High)

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted fu...

CVSS:8.7(High)

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.

CVSS:9.4(Critical)

Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.