From bdad493531bcaa29a1f917ebde005b74644c873b Mon Sep 17 00:00:00 2001 From: Ben Harvie Date: Wed, 28 Dec 2022 20:00:01 +0000 Subject: [PATCH] Update CVE-2022-4685.json --- 2022/4xxx/CVE-2022-4685.json | 103 ++++++----------------------------- 1 file changed, 16 insertions(+), 87 deletions(-) diff --git a/2022/4xxx/CVE-2022-4685.json b/2022/4xxx/CVE-2022-4685.json index 5773b57e503..ef3fb3a36a7 100644 --- a/2022/4xxx/CVE-2022-4685.json +++ b/2022/4xxx/CVE-2022-4685.json @@ -1,89 +1,18 @@ { - "CVE_data_meta": { - "ASSIGNER": "security@huntr.dev", - "ID": "CVE-2022-4685", - "STATE": "PUBLIC", - "TITLE": "Improper Access Control in usememos/memos" - }, - "affects": { - "vendor": { - "vendor_data": [ - { - "product": { - "product_data": [ - { - "product_name": "usememos/memos", - "version": { - "version_data": [ - { - "version_affected": "<", - "version_value": "0.9.0" - } - ] - } - } - ] - }, - "vendor_name": "usememos" - } - ] - } - }, - "data_format": "MITRE", - "data_type": "CVE", - "data_version": "4.0", - "description": { - "description_data": [ - { - "lang": "eng", - "value": "Improper Access Control in GitHub repository usememos/memos prior to 0.9.0." - } - ] - }, - "impact": { - "cvss": { - "attackComplexity": "LOW", - "attackVector": "NETWORK", - "availabilityImpact": "HIGH", - "baseScore": 8.8, - "baseSeverity": "HIGH", - "confidentialityImpact": "HIGH", - "integrityImpact": "HIGH", - "privilegesRequired": "LOW", - "scope": "UNCHANGED", - "userInteraction": "NONE", - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "version": "3.0" - } - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "lang": "eng", - "value": "CWE-284 Improper Access Control" - } + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2022-4685", + "ASSIGNER": "security@huntr.dev", + "STATE": "REJECT" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage." + } ] - } - ] - }, - "references": { - "reference_data": [ - { - "name": "https://huntr.dev/bounties/015dbf52-8924-4aad-86d7-892cb61157af", - "refsource": "CONFIRM", - "url": "https://huntr.dev/bounties/015dbf52-8924-4aad-86d7-892cb61157af" - }, - { - "name": "https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9", - "refsource": "MISC", - "url": "https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9" - } - ] - }, - "source": { - "advisory": "015dbf52-8924-4aad-86d7-892cb61157af", - "discovery": "EXTERNAL" - } -} \ No newline at end of file + } +}