CVE-2022-23055
08h25 +00:00
CVE の説明
ERPNext - Improper user access conrol
In ERPNext, versions v11.0.0-beta through v13.0.2 are vulnerable to Missing Authorization, in the chat rooms functionality. A low privileged attacker can send a direct message or a group message to any member or group, impersonating themselves as the administrator. The attacker can also read chat messages of groups that they do not belong to, and of other users.CVE の解決策
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Missing Authorization The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 5.5 | AV:N/AC:L/Au:S/C:P/I:P/A:N | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
関連製品
構成 0
Frappe>>Erpnext >> Version ～から（含む） 11.0.4 ～まで（含まない） 13.1.0
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
Frappe>>Erpnext >> Version 11.0.3
