CVE-2022-0514
Assigner: @huntrdev
Published: 2022-03-21T18:50:16
State: PUBLISHED
affected: product: crater-invoice/crater
vendor: crater-invoice
versions: lessThan: 6.0.5
status: affected
version: unspecified
versionType: custom
descriptions: value: Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-840
description: CWE-840 Business Logic Errors
type: CWE
source: advisory: af08000d-9f4a-4743-865d-5d5cdaf7fb27
discovery: EXTERNAL
title: Business Logic Errors in crater-invoice/crater