PT-2022-23054 · Bookwyrm · Bookwyrm

Agnihackers · Published 2022-08-12 · Updated 2022-08-16 · CVE-2022-35953

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions BookWyrm versions prior to 0.4.5

Description The issue in BookWyrm is related to tabnabbing, a form of phishing that allows attackers to redirect users to malicious sites through vulnerable links.

Recommendations For versions prior to 0.4.5, update to version 0.4.5 to resolve the issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-35953

GHSA-XQ42-MQ5W-M24X

Affected Products

Bookwyrm

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35953.json · Exploit
• 🔥 https://github.com/bookwyrm-social/bookwyrm/security/advisories/GHSA-xq42-mq5w-m24x · Exploit
• 🔥 https://huntr.dev/bounties/67ca22bd-19c6-466b-955a-b1ee2da0c575 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-35953 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35953 · Vendor Advisory
• https://t.me/cibsecurity/48124 · Telegram Post