CVE-2022-4564

HIGH 8.8CVE-2022-4564 · Published 16/12/2022 · updated 17/06/2026

In short

CVE-2022-4564 is a HIGH (CVSS 8.8) vulnerability affecting materia (ucf).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
materia ucf	`≤ 9.0.0`	No fix yet

Description

A vulnerability classified as problematic has been found in University of Central Florida Materia up to 9.0.0. This affects the function before of the file fuel/app/classes/controller/api.php of the component API Controller. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 9.0.1-alpha1 is able to address this issue. The name of the patch is af259115d2e8f17068e61902151ee8a9dbac397b. It is recommended to upgrade the affected component. The identifier VDB-215973 was assigned to this vulnerability.

References

ucfopen/Materia commit af25911 · Patch
ucfopen/Materia#1371 · Patch
ucfopen/Materia release v9.0.1-alpha1 · Release Notes
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free