Vulnerability · Published May 12, 2022 · Assigned by @huntrdev
CVE-2022-1681Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
High 7.2
In plain English
A high-severity authentication bypass in requarks/wiki from requarks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).
Severity (CVSS 3.0)7.2High
Exploit odds (30 days)2.0%top 19.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| requarks | requarks/wiki | unspecified – before 2.5.281 |
Weakness: CWE-288 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://huntr.dev/bounties/591b11e1-7504-4a96-99c6-08f2b419e767 x_refsource_CONFIRM
- https://github.com/requarks/wiki/commit/78d02dc8e5d103d248e5d7632bf7a6facdf4264c x_refsource_MISC