Vulnerability · Published May 12, 2022 · Assigned by @huntrdev
CVE-2022-1698Allowing long password leads to denial of service in causefx/organizr
Critical 9.9
In plain English
A critical-severity security flaw in causefx/organizr from causefx. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS 3.0)9.9Critical
Exploit odds (30 days)1.1%top 34.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| causefx | causefx/organizr | unspecified – before 2.1.2000 |
Weakness: CWE-191 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
References
- https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56 x_refsource_MISC
- https://huntr.dev/bounties/f4ab747b-e89a-4514-9432-ac1ea56639f3 x_refsource_CONFIRM