# Vulnerabilities published in 2022


- [CVE-2022-39372](https://insights.sbomify.com/CVE-2022-39372/): Stored Cross-Site Scripting (XSS) in user information in GLPI (low 3.5)
- [CVE-2022-39371](https://insights.sbomify.com/CVE-2022-39371/): Stored Cross-Site Scripting (XSS) through asset inventory in GLPI (high 7.5)
- [CVE-2022-39370](https://insights.sbomify.com/CVE-2022-39370/): Improper access to debug panel in GLPI (medium 4.3)
- [CVE-2022-3937](https://insights.sbomify.com/CVE-2022-3937/): Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39369](https://insights.sbomify.com/CVE-2022-39369/): Service Hostname Discovery Exploitation in phpCAS (high 8.0)
- [CVE-2022-39368](https://insights.sbomify.com/CVE-2022-39368/): Californium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records (high 8.2)
- [CVE-2022-39367](https://insights.sbomify.com/CVE-2022-39367/): Vulnerability in handling of uploaded QTI ZIP files (high 8.6)
- [CVE-2022-39366](https://insights.sbomify.com/CVE-2022-39366/): DataHub missing JWT signature check (critical 9.9)
- [CVE-2022-39365](https://insights.sbomify.com/CVE-2022-39365/): RCE vulnerability in Pimcore/Mail & Dynamic Text Layout (critical 9.8)
- [CVE-2022-39364](https://insights.sbomify.com/CVE-2022-39364/): Exception logging in Sharepoint app reveals clear-text connection details (medium 4.0)
- [CVE-2022-39362](https://insights.sbomify.com/CVE-2022-39362/): Metabase vulnerable to arbitrary SQL execution from queryhash (high 8.8)
- [CVE-2022-39361](https://insights.sbomify.com/CVE-2022-39361/): Metabase vulnerable to Remote Code Execution via H2 (high 8.8)
- [CVE-2022-39360](https://insights.sbomify.com/CVE-2022-39360/): Metabase SSO users able to circumvent IdP login by doing password reset (medium 6.5)
- [CVE-2022-3936](https://insights.sbomify.com/CVE-2022-3936/): Team Members < 5.2.1 - Editor+ Stored XSS (medium 4.8)
- [CVE-2022-39359](https://insights.sbomify.com/CVE-2022-39359/): Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs (medium 6.5)
- [CVE-2022-39358](https://insights.sbomify.com/CVE-2022-39358/): Metabase vulnerable to circumvention of Locked parameter in Signed Embedding (medium 6.5)
- [CVE-2022-39357](https://insights.sbomify.com/CVE-2022-39357/): Winter vulnerable to Prototype Pollution in Snowboard framework (high 8.1)
- [CVE-2022-39356](https://insights.sbomify.com/CVE-2022-39356/): Discourse user account takeover via email and invite link (high 8.9)
- [CVE-2022-39355](https://insights.sbomify.com/CVE-2022-39355/): Discourse Patreon vulnerable to improper validation of email during Patreon authentication (critical 9.1)
- [CVE-2022-39354](https://insights.sbomify.com/CVE-2022-39354/): evm has incorrect is_static parameter for custom stateful precompiles (medium 5.9)
- [CVE-2022-39353](https://insights.sbomify.com/CVE-2022-39353/): xmldom allows multiple root nodes in a DOM (critical 9.4)
- [CVE-2022-39352](https://insights.sbomify.com/CVE-2022-39352/): OpenFGA Authorization Bypass (medium 4.8)
- [CVE-2022-39351](https://insights.sbomify.com/CVE-2022-39351/): Information disclosure in dependency-track (medium 4.4)
- [CVE-2022-39350](https://insights.sbomify.com/CVE-2022-39350/): @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details (medium 5.4)
- [CVE-2022-3935](https://insights.sbomify.com/CVE-2022-3935/): Welcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site Scripting (medium 5.4)
- [CVE-2022-39349](https://insights.sbomify.com/CVE-2022-39349/): Tasks.org vulnerable to data exfiltration by malicous app or adb (medium 5.5)
- [CVE-2022-39348](https://insights.sbomify.com/CVE-2022-39348/): Twisted vulnerable to NameVirtualHost Host header injection (medium 5.4)
- [CVE-2022-39347](https://insights.sbomify.com/CVE-2022-39347/): Missing path sanitation with `drive` channel in FreeRDP (low 2.6)
- [CVE-2022-39346](https://insights.sbomify.com/CVE-2022-39346/): Missing length validation of user displayname in nextcloud server (low 3.5)
- [CVE-2022-39345](https://insights.sbomify.com/CVE-2022-39345/): Gin-vue-admin arbitrary file upload vulnerability caused by path traversal (critical 9.8)
- [CVE-2022-39344](https://insights.sbomify.com/CVE-2022-39344/): Azure RTOS USBX vulnerable to buffer overflow (critical 9.8)
- [CVE-2022-39343](https://insights.sbomify.com/CVE-2022-39343/): Azure RTOS FileX vulnerable to Buffer Offerflow (medium 5.6)
- [CVE-2022-39342](https://insights.sbomify.com/CVE-2022-39342/): OpenFGA Authorization Bypass (medium 5.9)
- [CVE-2022-39341](https://insights.sbomify.com/CVE-2022-39341/): OpenFGA Authorization Bypass (medium 5.9)
- [CVE-2022-39340](https://insights.sbomify.com/CVE-2022-39340/): OpenFGA Information Disclosure (medium 5.3)
- [CVE-2022-3934](https://insights.sbomify.com/CVE-2022-3934/): Flat PM < 3.0.13 - Reflected Cross-Site Scripting (medium 5.4)
- [CVE-2022-39339](https://insights.sbomify.com/CVE-2022-39339/): Cleartext Transmission of Sensitive Information in user_oidc (medium 4.3)
- [CVE-2022-39338](https://insights.sbomify.com/CVE-2022-39338/): Stored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidc (low 3.5)
- [CVE-2022-39337](https://insights.sbomify.com/CVE-2022-39337/): Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat (high 7.5)
- [CVE-2022-39335](https://insights.sbomify.com/CVE-2022-39335/): Synapse does not apply enough checks to servers requesting auth events of events in a room (medium 5.0)
- [CVE-2022-39334](https://insights.sbomify.com/CVE-2022-39334/): nextcloudcmd incorrectly trusts bad TLS certificates (low 3.9)
- [CVE-2022-39333](https://insights.sbomify.com/CVE-2022-39333/): Cross-site scripting (XSS) in Nextcloud Desktop Client (medium 4.6)
- [CVE-2022-39332](https://insights.sbomify.com/CVE-2022-39332/): Cross-site scripting (XSS) in Nextcloud Desktop Client (medium 4.6)
- [CVE-2022-39331](https://insights.sbomify.com/CVE-2022-39331/): Cross-site Scripting (XSS) in Nexcloud Desktop Client (medium 4.6)
- [CVE-2022-39330](https://insights.sbomify.com/CVE-2022-39330/): Database resource exhaustion for logged-in users via sharee recommendations with circles (medium 4.8)
- [CVE-2022-3933](https://insights.sbomify.com/CVE-2022-3933/): Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting (medium 5.4)
- [CVE-2022-39329](https://insights.sbomify.com/CVE-2022-39329/): Profile of disabled user stays accessible (low 3.5)
- [CVE-2022-39328](https://insights.sbomify.com/CVE-2022-39328/): Grafana vulnerable to race condition allowing privilege escalation (critical 9.8)
- [CVE-2022-39327](https://insights.sbomify.com/CVE-2022-39327/): Improper Control of Generation of Code ('Code Injection') in Azure CLI (high 8.1)
- [CVE-2022-39326](https://insights.sbomify.com/CVE-2022-39326/): kartverket/github-workflows's run-terraform allows for RCE via terraform plan (high 8.8)
- [CVE-2022-39325](https://insights.sbomify.com/CVE-2022-39325/): Cross-site scripting vulnerability in BaserCMS (medium 4.6)
- [CVE-2022-39324](https://insights.sbomify.com/CVE-2022-39324/): Grafana vulnerable to spoofing originalUrl of snapshots (medium 6.7)
- [CVE-2022-39323](https://insights.sbomify.com/CVE-2022-39323/): SQL Injection on REST API in GLPI (high 7.4)
- [CVE-2022-39322](https://insights.sbomify.com/CVE-2022-39322/): @keystone-6/core vulnerable to field-level access-control bypass for multiselect field (critical 9.1)
- [CVE-2022-39321](https://insights.sbomify.com/CVE-2022-39321/): GitHub Actions Runner vulnerable to Docker Command Escaping (high 8.8)
- [CVE-2022-39320](https://insights.sbomify.com/CVE-2022-39320/): Heap buffer overflow in urbdrc channel (medium 5.5)
- [CVE-2022-39319](https://insights.sbomify.com/CVE-2022-39319/): Missing length validation in urbdrc channel in FreeRDP (medium 4.6)
- [CVE-2022-39318](https://insights.sbomify.com/CVE-2022-39318/): Division by zero in urbdrc channel in FreeRDP (medium 4.8)
- [CVE-2022-39317](https://insights.sbomify.com/CVE-2022-39317/): Out of bounds read in zgfx decoder in FreeRDP (medium 4.6)
- [CVE-2022-39316](https://insights.sbomify.com/CVE-2022-39316/): Out of bound read in FreeRDP (medium 4.8)
- [CVE-2022-39315](https://insights.sbomify.com/CVE-2022-39315/): Kirby CMS vulnerable to user enumeration in the brute force protection (medium 6.5)
- [CVE-2022-39314](https://insights.sbomify.com/CVE-2022-39314/): User enumeration in the code-based login and password reset forms (medium 4.8)
- [CVE-2022-39313](https://insights.sbomify.com/CVE-2022-39313/): Parse Server crashes when receiving file download request with invalid byte range (high 7.5)
- [CVE-2022-39312](https://insights.sbomify.com/CVE-2022-39312/): Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability (critical 9.8)
- [CVE-2022-39311](https://insights.sbomify.com/CVE-2022-39311/): Compromised agents may be able to execute remote code on GoCD Server (critical 9.1)
- [CVE-2022-39310](https://insights.sbomify.com/CVE-2022-39310/): Malicious agent may be able to impersonate another agent in GoCD (medium 4.9)
- [CVE-2022-39309](https://insights.sbomify.com/CVE-2022-39309/): GoCD server secret encryption/decryption key leaked to agents during material serialization (medium 4.9)
- [CVE-2022-39308](https://insights.sbomify.com/CVE-2022-39308/): GoCD API authentication of user access tokens subject to timing attack during comparison (medium 6.5)
- [CVE-2022-39307](https://insights.sbomify.com/CVE-2022-39307/): Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password (medium 6.7)
- [CVE-2022-39306](https://insights.sbomify.com/CVE-2022-39306/): Grafana contains Improper Input Validation (medium 6.4)
- [CVE-2022-39305](https://insights.sbomify.com/CVE-2022-39305/): Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type (critical 9.8)
- [CVE-2022-39304](https://insights.sbomify.com/CVE-2022-39304/): ghinstallation returns app JWT in error responses (medium 5.0)
- [CVE-2022-39303](https://insights.sbomify.com/CVE-2022-39303/): Ree6 vulnerable to SQL Injection (high 8.1)
- [CVE-2022-39302](https://insights.sbomify.com/CVE-2022-39302/): Ree6 may bypass webhook protection (medium 5.5)
- [CVE-2022-39301](https://insights.sbomify.com/CVE-2022-39301/): sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload (high 8.2)
- [CVE-2022-39300](https://insights.sbomify.com/CVE-2022-39300/): Signature bypass via multiple root elements in node-SAML (high 7.7)
- [CVE-2022-3930](https://insights.sbomify.com/CVE-2022-3930/): Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR (medium 6.5)
- [CVE-2022-39299](https://insights.sbomify.com/CVE-2022-39299/): Signature bypass via multiple root elements in Passport-SAML (high 7.4)
- [CVE-2022-39298](https://insights.sbomify.com/CVE-2022-39298/): Deserialization of untrusted data in MelisFront (high 7.7)
- [CVE-2022-39297](https://insights.sbomify.com/CVE-2022-39297/): Deserialization of untrusted data in MelisCms (high 7.7)
- [CVE-2022-39296](https://insights.sbomify.com/CVE-2022-39296/): Path traversal in MelisAssetManager (high 8.6)
- [CVE-2022-39295](https://insights.sbomify.com/CVE-2022-39295/): Improper Neutralization of Alternate XSS Syntax in Knowage-Server (medium 6.1)
- [CVE-2022-39294](https://insights.sbomify.com/CVE-2022-39294/): (DoS) Denial of Service from unchecked request length in conduit-hyper (high 7.5)
- [CVE-2022-39293](https://insights.sbomify.com/CVE-2022-39293/): Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow (high 8.6)
- [CVE-2022-39292](https://insights.sbomify.com/CVE-2022-39292/): Exposure of sensitive Slack webhook URLs in debug logs and traces (high 7.5)
- [CVE-2022-39291](https://insights.sbomify.com/CVE-2022-39291/): Denial of service through logs in zoneminder (medium 5.4)
- [CVE-2022-39290](https://insights.sbomify.com/CVE-2022-39290/): CSRF key bypass using HTTP methods in zoneminder (high 8.0)
- [CVE-2022-3929](https://insights.sbomify.com/CVE-2022-3929/): Communication between the client and server partially using CORBA over TCP/IP (high 8.3)
- [CVE-2022-39289](https://insights.sbomify.com/CVE-2022-39289/): Database log access in ZoneMinder (critical 9.1)
- [CVE-2022-39288](https://insights.sbomify.com/CVE-2022-39288/): Denial of service in Fastify via Content-Type header (high 7.5)
- [CVE-2022-39287](https://insights.sbomify.com/CVE-2022-39287/): Plaintext transmission of CSRF tokens in tiny-csrf (high 8.1)
- [CVE-2022-39286](https://insights.sbomify.com/CVE-2022-39286/): Execution with Unnecessary Privileges in JupyterApp (high 8.8)
- [CVE-2022-39285](https://insights.sbomify.com/CVE-2022-39285/): Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder (high 7.6)
- [CVE-2022-39284](https://insights.sbomify.com/CVE-2022-39284/): Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4 (low 2.6)
- [CVE-2022-39283](https://insights.sbomify.com/CVE-2022-39283/): FreeRDP may read and display out of bounds data (medium 5.9)
- [CVE-2022-39282](https://insights.sbomify.com/CVE-2022-39282/): RDP client: Read of uninitialized memory with parallel port redirection (low 3.5)
- [CVE-2022-39281](https://insights.sbomify.com/CVE-2022-39281/): Remote Denial of Service via Tasks endpoint in fat_free_crm (medium 6.5)
- [CVE-2022-39280](https://insights.sbomify.com/CVE-2022-39280/): Regular expression denial of service in dparse (medium 5.9)
- [CVE-2022-3928](https://insights.sbomify.com/CVE-2022-3928/): Hardcoded credential is found in the message queue (high 7.1)
- [CVE-2022-39279](https://insights.sbomify.com/CVE-2022-39279/): Discourse-chat plugin susceptible to XSS in channel name and description (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/256/