CVE-2022-47002 - A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request

CRITICAL

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request

Published Feb 1, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 6.25%

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49780		Advisory
https://github.com/MasaCMS/MasaCMS/releases/tag/7.3.10		Release NotesThird Party Advisory
https://www.hoyahaxa.com/2023/01/preliminary-security-advisory.html		Third Party Advisory
https://www.hoyahaxa.com/2023/03/authentication-bypass-mura-masa.html		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 1, 2023

Updated Aug 3, 2024

Reserved Dec 12, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 1, 2023

Updated Aug 3, 2024

GitHub

No data