CVE-2022-2595 : Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.

Published 2022-08-01 15:15:10

Updated 2022-08-05 03:42:08

Source huntr.dev

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2022-2595

Kromit » Titra
Versions before (<) 0.79.1
cpe:2.3:a:kromit:titra:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 59 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	huntr.dev
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3.9	6.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Assigned by: security@huntr.dev (Primary)

https://huntr.dev/bounties/1c6afb84-2025-46d8-9e9f-cbfc20e5d04d

huntr - The world’s first bug bounty platform for AI/ML
Exploit;Patch;Third Party Advisory
https://github.com/kromitgmbh/titra/commit/fe8c3cdeb70e53b9f38f1022186ab16324d332c5

🐛 fixed a bug in the oidc configuration preventing saving changes · kromitgmbh/titra@fe8c3cd · GitHub
Patch;Third Party Advisory

Jump to