The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.
References
| Link | Resource |
|---|---|
| https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/ | Exploit Third Party Advisory |
| https://issues.ametys.org/browse/CMS-10973 | Issue Tracking Vendor Advisory |
| https://podalirius.net/en/cves/2022-26159/ | Exploit Third Party Advisory |
Configurations
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-425 |
07 Mar 2022, 18:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://podalirius.net/en/cves/2022-26159/ - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/ - Exploit, Third Party Advisory | |
| References | (MISC) https://issues.ametys.org/browse/CMS-10973 - Issue Tracking, Vendor Advisory | |
| CWE | CWE-668 | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
| CPE | cpe:2.3:a:ametys:ametys:*:*:*:*:*:*:*:* |
28 Feb 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Feb 2022, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-02-28 04:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-26159
Mitre link : CVE-2022-26159
CVE.ORG link : CVE-2022-26159
JSON object : View
Products Affected
ametys
- ametys
CWE
CWE-425
Direct Request ('Forced Browsing')