CVE-2022-23889: Medium severity yzmcms vulnerability
Published Jan 28, 2022
·Updated
The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments.
Affected Software
1 affected component
YzmCMS YzmCMS=6.3
Event History
Jan 28, 2022
CVE Published
via MITRE·08:45 PM
Data Sourced
via MITRE·08:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-23889?
CVE-2022-23889 has a medium severity, primarily due to its potential for spam and resource exhaustion.
2
How do I fix CVE-2022-23889?
To fix CVE-2022-23889, consider updating to the latest version of YzmCMS or implementing rate limiting on the comment function.
3
What does CVE-2022-23889 exploit?
CVE-2022-23889 exploits the comment function in YzmCMS v6.3, allowing for concurrent operations that flood the system with comments.
4
Which version of YzmCMS is affected by CVE-2022-23889?
CVE-2022-23889 affects YzmCMS version 6.3.
5
Can CVE-2022-23889 lead to a denial of service attack?
Yes, CVE-2022-23889 can lead to denial of service due to excessive comments that may overwhelm the system resources.