PT-2022-15638 · Umbraco · Umbraco

Appcheck Ltd · Published 2022-01-18 · Updated 2022-01-26 · CVE-2022-22691

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Umbraco (affected versions not specified)

Description The issue concerns the password reset component in Umbraco, which uses the hostname from the request host header to build a password reset URL. This could allow an attacker to manipulate the URL, potentially directing users to the attacker's server and disclosing the password reset token if the link is followed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

CWE-640

Related Identifiers

CVE-2022-22691

GHSA-R8PR-83CC-CCV7

Affected Products

Umbraco

References · 6

• 🔥 https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691 · Exploit
• https://osv.dev/vulnerability/CVE-2022-22691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22691 · Security Note
• https://osv.dev/vulnerability/GHSA-r8pr-83cc-ccv7 · Vendor Advisory
• https://github.com/umbraco/Umbraco-CMS · Note
• https://t.me/cibsecurity/35732 · Telegram Post