CVE-2022-25318

EUVD-2022-30001
An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
cerebrate-projectcerebrate
𝑥
≤ 1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/cerebrate-project/cerebrate/commit/15190b930ebada9e8d294db57c96832799d9d93e
https://zigrin.com/advisories/cerebrate-an-incorrect-sharing-group-acl/
https://github.com/cerebrate-project/cerebrate/commit/15190b930ebada9e8d294db57c96832799d9d93e
https://zigrin.com/advisories/cerebrate-an-incorrect-sharing-group-acl/