neorazorx/facturascripts · Security
Account takeover in facturascripts
- GHSA ID
- GHSA-vjq3-x3f2-fvxq
- CVE ID
- CVE-2022-1715
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.08 due to improper type casting.
CWEs
- CWE-522 · Insufficiently Protected Credentials
- CWE-1125 · Excessive Attack Surface