PT-2022-14054 · Causefx · Organizr

Published 2022-05-12 · Updated 2022-07-25 · CVE-2022-1698

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions causefx/organizr versions prior to 2.1.2000

Description The issue allows for a denial of service when long passwords are used, potentially enabling a DDoS attack that prevents genuine users from accessing resources or applications.

Recommendations For versions prior to 2.1.2000, update to version 2.1.2000 or later to resolve the issue.

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2022-1698

Affected Products

Organizr

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1698.json · Exploit
• 🔥 https://huntr.dev/bounties/f4ab747b-e89a-4514-9432-ac1ea56639f3 · Exploit
• https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-1698 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1698 · Vendor Advisory