CVE-2022-3540 - An issue has been discovered in hunter2 affecting all versions before 2.1.0

Back Back to CVE browser

MEDIUM

An issue has been discovered in hunter2 affecting all versions before 2.1.0

Published Oct 17, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attacker to extract other users email addresses

Affected products

Vendor The hunter2 Contributors Product Hunter2 Default
n/a
- Version
  <2.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

The hunter2 Contributors

Hunter2

n/a

Version	Status	Constraints
<2.1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-312

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42906
Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3540.json
Third Party AdvisoryVDB Entry
https://gitlab.com/hunter2.app/hunter2/-/issues/529
Issue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42906		Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3540.json		Third Party AdvisoryVDB Entry
https://gitlab.com/hunter2.app/hunter2/-/issues/529		Issue TrackingThird Party Advisory