# Vulnerabilities published in 2022


- [CVE-2022-39278](https://insights.sbomify.com/CVE-2022-39278/): Istio vulnerable to denial of service attack due to Golang Regex Library (high 7.5)
- [CVE-2022-39277](https://insights.sbomify.com/CVE-2022-39277/): Cross-Site Scripting (XSS) in external links in GLPI (medium 4.5)
- [CVE-2022-39276](https://insights.sbomify.com/CVE-2022-39276/): Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning (low 3.5)
- [CVE-2022-39275](https://insights.sbomify.com/CVE-2022-39275/): Improper object type validation in saleor (medium 5.3)
- [CVE-2022-39274](https://insights.sbomify.com/CVE-2022-39274/): Buffer Overflow in `ProcessRadioRxDone` in LoRaMac-node (high 7.5)
- [CVE-2022-39273](https://insights.sbomify.com/CVE-2022-39273/): Default OAuth Authorization Server secret in FlyteAdmin (medium 4.8)
- [CVE-2022-39272](https://insights.sbomify.com/CVE-2022-39272/): Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration (medium 5.0)
- [CVE-2022-39271](https://insights.sbomify.com/CVE-2022-39271/): Traefik HTTP/2 connections management could cause a denial of service (high 7.5)
- [CVE-2022-39270](https://insights.sbomify.com/CVE-2022-39270/): Arbitrary HTML injection in table-of-contents theme component in DiscoTOC (medium 5.4)
- [CVE-2022-3927](https://insights.sbomify.com/CVE-2022-3927/): Hardcoded credentials in FOXMAN-UN (high 8.0)
- [CVE-2022-39269](https://insights.sbomify.com/CVE-2022-39269/): Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip (critical 9.1)
- [CVE-2022-39268](https://insights.sbomify.com/CVE-2022-39268/): orchest vulnerable to cross-site request forgery that allows control of a user instance (high 8.1)
- [CVE-2022-39267](https://insights.sbomify.com/CVE-2022-39267/): Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups (high 8.8)
- [CVE-2022-39266](https://insights.sbomify.com/CVE-2022-39266/): isolated-vm has vulnerable CachedDataOptions in API (critical 9.7)
- [CVE-2022-39265](https://insights.sbomify.com/CVE-2022-39265/): Mail settings' command parameter injection in mybb (high 7.2)
- [CVE-2022-39264](https://insights.sbomify.com/CVE-2022-39264/): nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver (high 8.6)
- [CVE-2022-39263](https://insights.sbomify.com/CVE-2022-39263/): NextAuth.js Upstash Adapter missing token verification (medium 6.8)
- [CVE-2022-39262](https://insights.sbomify.com/CVE-2022-39262/): Stored Cross-Site Scripting (XSS) on login page in GLPI (medium 5.2)
- [CVE-2022-39261](https://insights.sbomify.com/CVE-2022-39261/): Twig may load a template outside a configured directory when using the filesystem loader (high 7.5)
- [CVE-2022-39260](https://insights.sbomify.com/CVE-2022-39260/): Git vulnerable to Remote Code Execution via Heap overflow in `git shell` (high 8.5)
- [CVE-2022-3926](https://insights.sbomify.com/CVE-2022-3926/): WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF (medium 6.5)
- [CVE-2022-39259](https://insights.sbomify.com/CVE-2022-39259/): Jadx-gui subject to Denial of Service via Swing HTML rendering (low 3.3)
- [CVE-2022-39258](https://insights.sbomify.com/CVE-2022-39258/): mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI (high 8.1)
- [CVE-2022-39257](https://insights.sbomify.com/CVE-2022-39257/): Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions (high 7.5)
- [CVE-2022-39256](https://insights.sbomify.com/CVE-2022-39256/): Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution. (critical 9.0)
- [CVE-2022-39255](https://insights.sbomify.com/CVE-2022-39255/): Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion (high 8.6)
- [CVE-2022-39254](https://insights.sbomify.com/CVE-2022-39254/): When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder (high 8.6)
- [CVE-2022-39253](https://insights.sbomify.com/CVE-2022-39253/): Git subject to exposure of sensitive information via local clone of symbolic links (medium 5.5)
- [CVE-2022-39252](https://insights.sbomify.com/CVE-2022-39252/): matrix-sdk-crypto contains potential impersonation via room key forward responses (high 8.6)
- [CVE-2022-39251](https://insights.sbomify.com/CVE-2022-39251/): Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion (high 8.6)
- [CVE-2022-39250](https://insights.sbomify.com/CVE-2022-39250/): Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification (high 8.6)
- [CVE-2022-3925](https://insights.sbomify.com/CVE-2022-3925/): Buddybadges <= 1.0.0 - Admin+ SQLi (high 7.2)
- [CVE-2022-39249](https://insights.sbomify.com/CVE-2022-39249/): Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions (high 7.5)
- [CVE-2022-39248](https://insights.sbomify.com/CVE-2022-39248/): matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion (high 8.6)
- [CVE-2022-39246](https://insights.sbomify.com/CVE-2022-39246/): matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions (high 7.5)
- [CVE-2022-39245](https://insights.sbomify.com/CVE-2022-39245/): Mist vulnerable to user providing a Sudo binary for authentication checks (high 8.4)
- [CVE-2022-39244](https://insights.sbomify.com/CVE-2022-39244/): Buffer overflow in pjlib scanner and pjmedia (high 7.5)
- [CVE-2022-39243](https://insights.sbomify.com/CVE-2022-39243/): NuProcess vulnerable to command-line injection through insertion of NUL character(s) (high 8.4)
- [CVE-2022-39242](https://insights.sbomify.com/CVE-2022-39242/): Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices (medium 5.3)
- [CVE-2022-39241](https://insights.sbomify.com/CVE-2022-39241/): Possible Server-Side Request Forgery (SSRF) in webhooks (high 7.6)
- [CVE-2022-39240](https://insights.sbomify.com/CVE-2022-39240/): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph (medium 5.4)
- [CVE-2022-3924](https://insights.sbomify.com/CVE-2022-3924/): named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota (high 7.5)
- [CVE-2022-39239](https://insights.sbomify.com/CVE-2022-39239/): @netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation (medium 6.1)
- [CVE-2022-39238](https://insights.sbomify.com/CVE-2022-39238/): Improper Authentication in Arvados when using PAM as identity provider (medium 4.2)
- [CVE-2022-39237](https://insights.sbomify.com/CVE-2022-39237/): Digital Signature Hash Algorithms Not Validated in sylabs/sif (medium 6.3)
- [CVE-2022-39236](https://insights.sbomify.com/CVE-2022-39236/): Matrix Javascript SDK improper beacon events can cause availability issues (medium 4.3)
- [CVE-2022-39234](https://insights.sbomify.com/CVE-2022-39234/): user session persists even after permanently deleting account in GLPI (medium 4.7)
- [CVE-2022-39233](https://insights.sbomify.com/CVE-2022-39233/): Tuleap subject to Missing Authorization allowing for branch prefix modification (medium 4.3)
- [CVE-2022-39232](https://insights.sbomify.com/CVE-2022-39232/): Discourse vulnerable to incomplete quote causing a topic to crash in the browser (medium 6.5)
- [CVE-2022-39231](https://insights.sbomify.com/CVE-2022-39231/): Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented (low 3.7)
- [CVE-2022-39230](https://insights.sbomify.com/CVE-2022-39230/): Security issue in fhir-works-on-aws-authz-smart (medium 6.5)
- [CVE-2022-3923](https://insights.sbomify.com/CVE-2022-3923/): ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup (medium 4.3)
- [CVE-2022-39229](https://insights.sbomify.com/CVE-2022-39229/): Grafana users with email as a username can block other users from signing in (medium 4.3)
- [CVE-2022-39228](https://insights.sbomify.com/CVE-2022-39228/): Observable Response Discrepancy in vantage6 (medium 5.3)
- [CVE-2022-39227](https://insights.sbomify.com/CVE-2022-39227/): Python-jwt subject to Authentication Bypass by Spoofing (critical 9.1)
- [CVE-2022-39226](https://insights.sbomify.com/CVE-2022-39226/): Discourse user profile location and website fields were not sufficiently length-limited (medium 4.3)
- [CVE-2022-39225](https://insights.sbomify.com/CVE-2022-39225/): Parse Server subject to Incorrect Resource Transfer Between Spheres (medium 4.3)
- [CVE-2022-39224](https://insights.sbomify.com/CVE-2022-39224/): Arbitrary shell execution when extracting or listing files contained in a malicious rpm. (high 7.0)
- [CVE-2022-39222](https://insights.sbomify.com/CVE-2022-39222/): OAuth authorization code exposure in Dex (critical 9.3)
- [CVE-2022-39221](https://insights.sbomify.com/CVE-2022-39221/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod (high 7.5)
- [CVE-2022-39220](https://insights.sbomify.com/CVE-2022-39220/): XSS Vulnerabilities in WebClient (medium 6.1)
- [CVE-2022-3922](https://insights.sbomify.com/CVE-2022-3922/): Broken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting (medium 4.8)
- [CVE-2022-39219](https://insights.sbomify.com/CVE-2022-39219/): Bifrost users using basic authntication can bypass write permission limit (high 8.5)
- [CVE-2022-39218](https://insights.sbomify.com/CVE-2022-39218/): Random number seed fixed during compilation (high 7.5)
- [CVE-2022-39217](https://insights.sbomify.com/CVE-2022-39217/): Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv (medium 5.8)
- [CVE-2022-39216](https://insights.sbomify.com/CVE-2022-39216/): Combodo iTop's weak password reset token leads to account takeover (high 7.4)
- [CVE-2022-39215](https://insights.sbomify.com/CVE-2022-39215/): The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauri (high 8.3)
- [CVE-2022-39214](https://insights.sbomify.com/CVE-2022-39214/): Authenticated users of Combodo iTop can take over any account (critical 9.6)
- [CVE-2022-39213](https://insights.sbomify.com/CVE-2022-39213/): Out-of-bounds Read in go-cvss (high 7.5)
- [CVE-2022-39212](https://insights.sbomify.com/CVE-2022-39212/): Last video frame is still sent after video is disabled in a call in Nextcloud Talk (medium 4.3)
- [CVE-2022-39211](https://insights.sbomify.com/CVE-2022-39211/): Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server (low 3.0)
- [CVE-2022-39210](https://insights.sbomify.com/CVE-2022-39210/): Access to internal files of the Nextcloud Android app (low 3.2)
- [CVE-2022-3921](https://insights.sbomify.com/CVE-2022-3921/): Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2022-39209](https://insights.sbomify.com/CVE-2022-39209/): Uncontrolled Resource Consumption in cmark-gfm (high 7.5)
- [CVE-2022-39208](https://insights.sbomify.com/CVE-2022-39208/): Git Repository Disclosure in Onedev (high 7.5)
- [CVE-2022-39207](https://insights.sbomify.com/CVE-2022-39207/): Persistent XSS in OneDev (medium 5.4)
- [CVE-2022-39206](https://insights.sbomify.com/CVE-2022-39206/): CI/CD Docker Escape in OneDev (critical 9.9)
- [CVE-2022-39205](https://insights.sbomify.com/CVE-2022-39205/): Access Control Bypass in Onedev (critical 9.0)
- [CVE-2022-39203](https://insights.sbomify.com/CVE-2022-39203/): Parsing issue in matrix-org/node-irc leading to room takeovers (high 8.8)
- [CVE-2022-39202](https://insights.sbomify.com/CVE-2022-39202/): IRC mode parameter confusion in matrix-appservice-irc (medium 4.3)
- [CVE-2022-39201](https://insights.sbomify.com/CVE-2022-39201/): Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins (medium 6.8)
- [CVE-2022-39200](https://insights.sbomify.com/CVE-2022-39200/): Signature checks not applied to some retrieved missing events (high 7.3)
- [CVE-2022-3920](https://insights.sbomify.com/CVE-2022-3920/): Consul Peering Imported Nodes/Services Leak (medium 5.3)
- [CVE-2022-39199](https://insights.sbomify.com/CVE-2022-39199/): Lack of proper validation in immudb (medium 5.8)
- [CVE-2022-39198](https://insights.sbomify.com/CVE-2022-39198/): Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass (critical 9.8)
- [CVE-2022-39197](https://insights.sbomify.com/CVE-2022-39197/): Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2022-39196](https://insights.sbomify.com/CVE-2022-39196/): Information disclosure in blackboard:blackboard learn (medium 6.5)
- [CVE-2022-39195](https://insights.sbomify.com/CVE-2022-39195/): Cross-site scripting in lsoft:listserv (medium 6.1)
- [CVE-2022-39194](https://insights.sbomify.com/CVE-2022-39194/): Denial of service in mediawiki:mediawiki (medium 4.9)
- [CVE-2022-39193](https://insights.sbomify.com/CVE-2022-39193/): Information disclosure in mediawiki:mediawiki (medium 5.3)
- [CVE-2022-39190](https://insights.sbomify.com/CVE-2022-39190/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2022-3919](https://insights.sbomify.com/CVE-2022-3919/): Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting (medium 4.8)
- [CVE-2022-39189](https://insights.sbomify.com/CVE-2022-39189/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2022-39188](https://insights.sbomify.com/CVE-2022-39188/): Race condition in debian:debian linux (medium 4.7)
- [CVE-2022-39187](https://insights.sbomify.com/CVE-2022-39187/): Rumpus - FTP server Reflected cross-site scripting (RXSS) (medium 6.8)
- [CVE-2022-39186](https://insights.sbomify.com/CVE-2022-39186/): EXFO - BV-10 Performance Endpoint Unit Misconfiguration (medium 6.2)
- [CVE-2022-39185](https://insights.sbomify.com/CVE-2022-39185/): EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. (critical 9.8)
- [CVE-2022-39184](https://insights.sbomify.com/CVE-2022-39184/): EXFO - BV-10 Performance Endpoint Unit Authentication bypass (critical 9.8)
- [CVE-2022-39183](https://insights.sbomify.com/CVE-2022-39183/): Moodle Plugin - SAML Auth Open Redirect (medium 6.5)
- [CVE-2022-39182](https://insights.sbomify.com/CVE-2022-39182/): H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/257/