8.8

CVE-2022-32320

A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ferdium ≫ Ferdium Version 6.0.0 Update -
Ferdium ≫ Ferdium Version 6.0.0 Update beta1
Ferdium ≫ Ferdium Version 6.0.0 Update beta2
Ferdium ≫ Ferdium Version 6.0.0 Update beta3
Ferdium ≫ Ferdium Version 6.0.0 Update nightly1
Ferdium ≫ Ferdium Version 6.0.0 Update nightly10
Ferdium ≫ Ferdium Version 6.0.0 Update nightly11
Ferdium ≫ Ferdium Version 6.0.0 Update nightly12
Ferdium ≫ Ferdium Version 6.0.0 Update nightly13
Ferdium ≫ Ferdium Version 6.0.0 Update nightly14
Ferdium ≫ Ferdium Version 6.0.0 Update nightly15
Ferdium ≫ Ferdium Version 6.0.0 Update nightly16
Ferdium ≫ Ferdium Version 6.0.0 Update nightly17
Ferdium ≫ Ferdium Version 6.0.0 Update nightly18
Ferdium ≫ Ferdium Version 6.0.0 Update nightly19
Ferdium ≫ Ferdium Version 6.0.0 Update nightly2
Ferdium ≫ Ferdium Version 6.0.0 Update nightly20
Ferdium ≫ Ferdium Version 6.0.0 Update nightly21
Ferdium ≫ Ferdium Version 6.0.0 Update nightly22
Ferdium ≫ Ferdium Version 6.0.0 Update nightly23
Ferdium ≫ Ferdium Version 6.0.0 Update nightly24
Ferdium ≫ Ferdium Version 6.0.0 Update nightly25
Ferdium ≫ Ferdium Version 6.0.0 Update nightly26
Ferdium ≫ Ferdium Version 6.0.0 Update nightly27
Ferdium ≫ Ferdium Version 6.0.0 Update nightly28
Ferdium ≫ Ferdium Version 6.0.0 Update nightly29
Ferdium ≫ Ferdium Version 6.0.0 Update nightly3
Ferdium ≫ Ferdium Version 6.0.0 Update nightly30
Ferdium ≫ Ferdium Version 6.0.0 Update nightly31
Ferdium ≫ Ferdium Version 6.0.0 Update nightly32
Ferdium ≫ Ferdium Version 6.0.0 Update nightly33
Ferdium ≫ Ferdium Version 6.0.0 Update nightly34
Ferdium ≫ Ferdium Version 6.0.0 Update nightly35
Ferdium ≫ Ferdium Version 6.0.0 Update nightly36
Ferdium ≫ Ferdium Version 6.0.0 Update nightly37
Ferdium ≫ Ferdium Version 6.0.0 Update nightly38
Ferdium ≫ Ferdium Version 6.0.0 Update nightly39
Ferdium ≫ Ferdium Version 6.0.0 Update nightly4
Ferdium ≫ Ferdium Version 6.0.0 Update nightly40
Ferdium ≫ Ferdium Version 6.0.0 Update nightly41
Ferdium ≫ Ferdium Version 6.0.0 Update nightly42
Ferdium ≫ Ferdium Version 6.0.0 Update nightly43
Ferdium ≫ Ferdium Version 6.0.0 Update nightly44
Ferdium ≫ Ferdium Version 6.0.0 Update nightly45
Ferdium ≫ Ferdium Version 6.0.0 Update nightly46
Ferdium ≫ Ferdium Version 6.0.0 Update nightly47
Ferdium ≫ Ferdium Version 6.0.0 Update nightly48
Ferdium ≫ Ferdium Version 6.0.0 Update nightly49
Ferdium ≫ Ferdium Version 6.0.0 Update nightly5
Ferdium ≫ Ferdium Version 6.0.0 Update nightly50
Ferdium ≫ Ferdium Version 6.0.0 Update nightly51
Ferdium ≫ Ferdium Version 6.0.0 Update nightly52
Ferdium ≫ Ferdium Version 6.0.0 Update nightly53
Ferdium ≫ Ferdium Version 6.0.0 Update nightly54
Ferdium ≫ Ferdium Version 6.0.0 Update nightly55
Ferdium ≫ Ferdium Version 6.0.0 Update nightly56
Ferdium ≫ Ferdium Version 6.0.0 Update nightly57
Ferdium ≫ Ferdium Version 6.0.0 Update nightly58
Ferdium ≫ Ferdium Version 6.0.0 Update nightly59
Ferdium ≫ Ferdium Version 6.0.0 Update nightly6
Ferdium ≫ Ferdium Version 6.0.0 Update nightly60
Ferdium ≫ Ferdium Version 6.0.0 Update nightly61
Ferdium ≫ Ferdium Version 6.0.0 Update nightly62
Ferdium ≫ Ferdium Version 6.0.0 Update nightly63
Ferdium ≫ Ferdium Version 6.0.0 Update nightly65
Ferdium ≫ Ferdium Version 6.0.0 Update nightly66
Ferdium ≫ Ferdium Version 6.0.0 Update nightly67
Ferdium ≫ Ferdium Version 6.0.0 Update nightly69
Ferdium ≫ Ferdium Version 6.0.0 Update nightly7
Ferdium ≫ Ferdium Version 6.0.0 Update nightly70
Ferdium ≫ Ferdium Version 6.0.0 Update nightly71
Ferdium ≫ Ferdium Version 6.0.0 Update nightly72
Ferdium ≫ Ferdium Version 6.0.0 Update nightly73
Ferdium ≫ Ferdium Version 6.0.0 Update nightly74
Ferdium ≫ Ferdium Version 6.0.0 Update nightly76
Ferdium ≫ Ferdium Version 6.0.0 Update nightly77
Ferdium ≫ Ferdium Version 6.0.0 Update nightly78
Ferdium ≫ Ferdium Version 6.0.0 Update nightly79
Ferdium ≫ Ferdium Version 6.0.0 Update nightly8
Ferdium ≫ Ferdium Version 6.0.0 Update nightly80
Ferdium ≫ Ferdium Version 6.0.0 Update nightly81
Ferdium ≫ Ferdium Version 6.0.0 Update nightly82
Ferdium ≫ Ferdium Version 6.0.0 Update nightly83
Ferdium ≫ Ferdium Version 6.0.0 Update nightly84
Ferdium ≫ Ferdium Version 6.0.0 Update nightly85
Ferdium ≫ Ferdium Version 6.0.0 Update nightly86
Ferdium ≫ Ferdium Version 6.0.0 Update nightly87
Ferdium ≫ Ferdium Version 6.0.0 Update nightly88
Ferdium ≫ Ferdium Version 6.0.0 Update nightly89
Ferdium ≫ Ferdium Version 6.0.0 Update nightly9
Ferdium ≫ Ferdium Version 6.0.0 Update nightly90
Ferdium ≫ Ferdium Version 6.0.0 Update nightly91
Ferdium ≫ Ferdium Version 6.0.0 Update nightly92
Ferdium ≫ Ferdium Version 6.0.0 Update nightly93
Ferdium ≫ Ferdium Version 6.0.0 Update nightly94
Ferdium ≫ Ferdium Version 6.0.0 Update nightly95
Ferdium ≫ Ferdium Version 6.0.0 Update nightly96
Ferdium ≫ Ferdium Version 6.0.0 Update nightly97
Ferdium ≫ Ferdium Version 6.0.0 Update nightly98
Getferdi ≫ Ferdi Version <= 5.8.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.395
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://getferdi.com/
Product
https://gist.github.com/omriinbar-cyesec/c1179fe99725d2b828b6573c0d110c9c
Third Party Advisory
https://github.com/getferdi/ferdi
Third Party Advisory