CVE-2022-2651

概要

参考情報

• packetstormsecurity.com/files/168423/Bookwyrm-0.4.3-Authentication-Bypass.html · Exploit
• bookwyrm-social/bookwyrm commit 7bbe42f · Patch
• huntr.dev/bounties/428eee94-f1a0-45d0-9e25-318641115550 · Exploit

bookwyrm のその他の脆弱性

• CVE-2022-35953中 6.1BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. Some links …
• CVE-2022-35925緊急 9.8BookWyrm is a social network for tracking reading. Versions prior to 0.4.5 were found to lack rate limiting on authentication views which al…
• CVE-2022-31136中 6.1Bookwyrm is an open source social reading and reviewing program. Versions of Bookwyrm prior to 0.4.1 did not properly sanitize html being re…
• CVE-2022-23644高 8.8BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vul…