PT-2022-14055 · Causefx · Organizr

Published 2022-05-12 · Updated 2022-07-25 · CVE-2022-1699

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions causefx/organizr versions prior to 2.1.2000

Description The issue is related to Uncontrolled Resource Consumption, which can be exploited to conduct a DDoS attack. This would prevent genuine users from accessing resources or applications.

Recommendations For versions prior to 2.1.2000, update to version 2.1.2000 or later to resolve the issue.

Exploit

Fix

Resource Exhaustion

Integer Overflow

Weakness Enumeration

CWE-400

CWE-190

Related Identifiers

CVE-2022-1699

Affected Products

Organizr

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1699.json · Exploit
• 🔥 https://huntr.dev/bounties/3024b2bb-50ca-46a2-85db-1cc916791cda · Exploit
• https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56 · Patch
• https://osv.dev/vulnerability/CVE-2022-1699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1699 · Security Note
• https://t.me/cibsecurity/42505 · Telegram Post