CVE-2022-45292

Medium

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been…

mitre·CWE-672·Published 2022-12-09

CVSS

5.3

EPSS

0.01

KEV

Exploits

cve.orgen

144 chars

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

NVDen

144 chars

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

Las invitaciones de usuario para Funkwhale v1.2.8 no caducan permanentemente después de usarse para registrarse y se pueden usar nuevamente después de que se haya eliminado una cuenta.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Secondary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N