CVE-2022-4879

Katalog CVE

CVSS 7.5 · High EPSS 0,53%

Kerentanan Improper Authorization pada forged alliance forever project forged alliance forever. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. The patch is named 6880971bd3d73d942384aff62d53058c206ce644. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217555.

Rincian

Terbit di NVD

6 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-285: Improper Authorization

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FAForever/fa/commit/6880971bd3d73d942384aff62d53058c206ce644 patch
• https://github.com/FAForever/fa/pull/4398 patch
• https://vuldb.com/?id.217555 advisory pihak ketiga
• https://github.com/FAForever/fa/releases/tag/3747 release notes
• https://vuldb.com/?ctiid.217555 permissions required