CVE-2022-44849: CSRF
Published Dec 7, 2022
·Updated
A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account.
Affected Software
1 affected component
Metinfo Metinfo=7.7
Event History
Dec 7, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-44849?
CVE-2022-44849 is a Cross-Site Request Forgery (CSRF) vulnerability in the Administrator List of MetInfo v7.7.
2
What is the severity of CVE-2022-44849?
CVE-2022-44849 has a severity score of 8.8, which is considered high.
3
How does CVE-2022-44849 affect MetInfo v7.7?
CVE-2022-44849 allows attackers to arbitrarily add a Super Administrator account in MetInfo v7.7.
4
Is MetInfo v7.7 the only affected software?
Yes, MetInfo v7.7 is the only affected software.
5
How can I fix CVE-2022-44849?
To fix CVE-2022-44849, it is recommended to update MetInfo to a version that has patched this vulnerability.