PT-2022-14039 · Unknown · Requarks/Wiki

Published 2022-05-12 · Updated 2022-05-20 · CVE-2022-1681

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions requarks/wiki versions prior to 2.5.281

Description The issue allows for authentication bypass using an alternate path or channel. This can result in a user gaining root user permissions.

Recommendations For versions prior to 2.5.281, update to version 2.5.281 or later to resolve the issue.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2022-1681

Affected Products

Requarks/Wiki

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1681.json · Exploit
• 🔥 https://huntr.dev/bounties/591b11e1-7504-4a96-99c6-08f2b419e767 · Exploit
• https://github.com/requarks/wiki/commit/78d02dc8e5d103d248e5d7632bf7a6facdf4264c · Patch
• https://osv.dev/vulnerability/CVE-2022-1681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1681 · Security Note
• https://t.me/cvenotify/30080 · Telegram Post