CVE-2022-4879

· MEDIUMModified

← All CVEs

CVSS v3.1

4.6

EPSS

0.53%

Published

Jan 6, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. The patch is named 6880971bd3d73d942384aff62d53058c206ce644. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217555.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-285

Affected Products (1)

forged_alliance_forever_project · forged_alliance_forever (up to 3747)vulnerable

References (10)

https://github.com/FAForever/fa/commit/6880971bd3d73d942384aff62d53058c206ce644

Patch

https://github.com/FAForever/fa/pull/4398

Patch

https://github.com/FAForever/fa/releases/tag/3747