CVE-2022-31185

MITTEL 5.3CVE-2022-31185 · Published 01/08/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-31185 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in mprweb (makedp).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.66%, höher als bei 51.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
mprweb makedp	`≤ 5.0.0`	No fix yet

Description

mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's email being leaked, which may be problematic if your email needs to remain private for any reason. Users hosting their own mprweb instance will need to upgrade to the latest commit to get this fixed. Users on the official instance will already have this issue fixed.

References

makedeb/mprweb commit d13e3f2 · Patch
makedeb/mprweb security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free