PT-2022-13816 · Causefx · Organizr

Published 2022-04-13 · Updated 2022-07-25 · CVE-2022-1346

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions causefx/organizr versions prior to 2.1.1810

Description The issue allows attackers to execute malicious scripts in the user's browser, potentially leading to session hijacking, sensitive data exposure, and other severe consequences. This is due to multiple stored XSS vulnerabilities.

Recommendations For versions prior to 2.1.1810, update to version 2.1.1810 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-1346

Affected Products

Organizr

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1346.json · Exploit
• 🔥 https://huntr.dev/bounties/8fe435b0-192f-41ca-b41e-580fcd34892f · Exploit
• https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1346 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1346 · Vendor Advisory
• https://t.me/cvenotify/28866 · Telegram Post