CVE-2022-32320: ferdium

csirt@kutim:~/threat-intel/cve/CVE-2022-32320

CVSS 8.8 · High EPSS 0,53%

Kerentanan Cross-Site Request Forgery (CSRF) pada ferdium. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.

Rincian

Terbit di NVD: 17 Juli 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari): 0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
ferdium	ferdium	Versi 6.0.0
ferdium	ferdium	Versi 6.0.0 beta1
ferdium	ferdium	Versi 6.0.0 beta2
ferdium	ferdium	Versi 6.0.0 beta3
ferdium	ferdium	Versi 6.0.0 nightly1
ferdium	ferdium	Versi 6.0.0 nightly10
ferdium	ferdium	Versi 6.0.0 nightly11
ferdium	ferdium	Versi 6.0.0 nightly12
ferdium	ferdium	Versi 6.0.0 nightly13
ferdium	ferdium	Versi 6.0.0 nightly14
ferdium	ferdium	Versi 6.0.0 nightly15
ferdium	ferdium	Versi 6.0.0 nightly16
ferdium	ferdium	Versi 6.0.0 nightly17
ferdium	ferdium	Versi 6.0.0 nightly18
ferdium	ferdium	Versi 6.0.0 nightly19
ferdium	ferdium	Versi 6.0.0 nightly2
ferdium	ferdium	Versi 6.0.0 nightly20
ferdium	ferdium	Versi 6.0.0 nightly21
ferdium	ferdium	Versi 6.0.0 nightly22
ferdium	ferdium	Versi 6.0.0 nightly23
ferdium	ferdium	Versi 6.0.0 nightly24
ferdium	ferdium	Versi 6.0.0 nightly25
ferdium	ferdium	Versi 6.0.0 nightly26
ferdium	ferdium	Versi 6.0.0 nightly27
ferdium	ferdium	Versi 6.0.0 nightly28
ferdium	ferdium	Versi 6.0.0 nightly29
ferdium	ferdium	Versi 6.0.0 nightly3
ferdium	ferdium	Versi 6.0.0 nightly30
ferdium	ferdium	Versi 6.0.0 nightly31
ferdium	ferdium	Versi 6.0.0 nightly32
ferdium	ferdium	Versi 6.0.0 nightly33
ferdium	ferdium	Versi 6.0.0 nightly34
ferdium	ferdium	Versi 6.0.0 nightly35
ferdium	ferdium	Versi 6.0.0 nightly36
ferdium	ferdium	Versi 6.0.0 nightly37
ferdium	ferdium	Versi 6.0.0 nightly38
ferdium	ferdium	Versi 6.0.0 nightly39
ferdium	ferdium	Versi 6.0.0 nightly4
ferdium	ferdium	Versi 6.0.0 nightly40
ferdium	ferdium	Versi 6.0.0 nightly41
ferdium	ferdium	Versi 6.0.0 nightly42
ferdium	ferdium	Versi 6.0.0 nightly43
ferdium	ferdium	Versi 6.0.0 nightly44
ferdium	ferdium	Versi 6.0.0 nightly45
ferdium	ferdium	Versi 6.0.0 nightly46
ferdium	ferdium	Versi 6.0.0 nightly47
ferdium	ferdium	Versi 6.0.0 nightly48
ferdium	ferdium	Versi 6.0.0 nightly49
ferdium	ferdium	Versi 6.0.0 nightly5
ferdium	ferdium	Versi 6.0.0 nightly50
ferdium	ferdium	Versi 6.0.0 nightly51
ferdium	ferdium	Versi 6.0.0 nightly52
ferdium	ferdium	Versi 6.0.0 nightly53
ferdium	ferdium	Versi 6.0.0 nightly54
ferdium	ferdium	Versi 6.0.0 nightly55
ferdium	ferdium	Versi 6.0.0 nightly56
ferdium	ferdium	Versi 6.0.0 nightly57
ferdium	ferdium	Versi 6.0.0 nightly58
ferdium	ferdium	Versi 6.0.0 nightly59
ferdium	ferdium	Versi 6.0.0 nightly6

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 100 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://gist.github.com/omriinbar-cyesec/c1179fe99725d2b828b6573c0d110c9c advisory pihak ketiga
https://github.com/getferdi/ferdi advisory pihak ketiga
https://getferdi.com/ product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.