PT-2022-21318 · Unknown · Lin-Cms Springboot

Published 2022-07-21 · Updated 2023-08-08 · CVE-2022-32430

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lin CMS Spring Boot version 0.2.1

Description An access control issue allows attackers to access the backend information and functions within the application.

Recommendations For Lin CMS Spring Boot version 0.2.1, consider restricting access to the backend information and functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2022-32430

GHSA-Q72P-4W56-HX7H

Affected Products

Lin-Cms Springboot

References · 9

• 🔥 https://mesec.cn/archives/277 · Exploit
• 🔥 https://mesec.cn/archives/278 · Exploit
• https://osv.dev/vulnerability/CVE-2022-32430 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q72p-4w56-hx7h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32430 · Security Note
• https://github.com/TaleLin/lin-cms-spring-boot/blob/3fc25bd8c10c73db2e7230809b322127eac554e3/src/main/resources/application.yml#L43 · Note
• https://github.com/TaleLin/lin-cms-spring-boot · Note
• https://t.me/cibsecurity/46764 · Telegram Post
• https://web.archive.org/web/20220721190946/https://mesec.cn/archives/277 · Note