CVE-2022-34774

 

Published at: - 22-08-2022 05:15

Last modified: - 26-08-2022 04:46

Total changes: - 2

Description

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

 

Verification logic

 

Reference

• https://www.gov.il/en/departments/faq/cve_advisories

 

Keywords

NVD

 

CVE-2022-34774

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures