What is GHSA-vjq3-x3f2-fvxq?

GHSA-vjq3-x3f2-fvxq is a security advisory published by GitHub Security Advisories with Critical severity. Account takeover in facturascripts

Which CVE IDs does GHSA-vjq3-x3f2-fvxq cover?

GHSA-vjq3-x3f2-fvxq covers the following CVE IDs: CVE-2022-1715. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vjq3-x3f2-fvxq?

GHSA-vjq3-x3f2-fvxq has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-vjq3-x3f2-fvxq?

GHSA-vjq3-x3f2-fvxq affects 1 product, including: composer/facturascripts/facturascripts:\u003c 2022.08.

GHSA-vjq3-x3f2-fvxqCriticalCVSS 9.8

Account takeover in facturascripts

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-1715 →

📋 Description

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.08 due to improper type casting.

🎯 Affected products1

composer/facturascripts/facturascripts:< 2022.08

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-1715
https://github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab
https://huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24
https://github.com/advisories/GHSA-vjq3-x3f2-fvxq