Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-23055

In ERPNext, versions v11.0.0-beta through v13.0.2 are vulnerable to Missing Authorization, in the chat rooms functionality. A low privileged attacker can send a direct message or a group message to any member or group, impersonating themselves as the administrator. The attacker can also read chat messages of groups that they do not belong to, and of other users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.4%
CVSS Severity
CVSS v2 Score 5.5
Products affected by CVE-2022-23055
  • Frappe » Erpnext » Version: 11.0.3
    cpe:2.3:a:frappe:erpnext:11.0.3
  • Frappe » Erpnext » Version: 11.1.0
    cpe:2.3:a:frappe:erpnext:11.1.0
  • Frappe » Erpnext » Version: 11.1.1
    cpe:2.3:a:frappe:erpnext:11.1.1
  • Frappe » Erpnext » Version: 11.1.10
    cpe:2.3:a:frappe:erpnext:11.1.10
  • Frappe » Erpnext » Version: 11.1.11
    cpe:2.3:a:frappe:erpnext:11.1.11
  • Frappe » Erpnext » Version: 11.1.12
    cpe:2.3:a:frappe:erpnext:11.1.12
  • Frappe » Erpnext » Version: 11.1.13
    cpe:2.3:a:frappe:erpnext:11.1.13
  • Frappe » Erpnext » Version: 11.1.14
    cpe:2.3:a:frappe:erpnext:11.1.14
  • Frappe » Erpnext » Version: 11.1.15
    cpe:2.3:a:frappe:erpnext:11.1.15
  • Frappe » Erpnext » Version: 11.1.16
    cpe:2.3:a:frappe:erpnext:11.1.16
  • Frappe » Erpnext » Version: 11.1.17
    cpe:2.3:a:frappe:erpnext:11.1.17
  • Frappe » Erpnext » Version: 11.1.18
    cpe:2.3:a:frappe:erpnext:11.1.18
  • Frappe » Erpnext » Version: 11.1.19
    cpe:2.3:a:frappe:erpnext:11.1.19
  • Frappe » Erpnext » Version: 11.1.2
    cpe:2.3:a:frappe:erpnext:11.1.2
  • Frappe » Erpnext » Version: 11.1.20
    cpe:2.3:a:frappe:erpnext:11.1.20
  • Frappe » Erpnext » Version: 11.1.21
    cpe:2.3:a:frappe:erpnext:11.1.21
  • Frappe » Erpnext » Version: 11.1.22
    cpe:2.3:a:frappe:erpnext:11.1.22
  • Frappe » Erpnext » Version: 11.1.23
    cpe:2.3:a:frappe:erpnext:11.1.23
  • Frappe » Erpnext » Version: 11.1.24
    cpe:2.3:a:frappe:erpnext:11.1.24
  • Frappe » Erpnext » Version: 11.1.25
    cpe:2.3:a:frappe:erpnext:11.1.25
  • Frappe » Erpnext » Version: 11.1.26
    cpe:2.3:a:frappe:erpnext:11.1.26
  • Frappe » Erpnext » Version: 11.1.27
    cpe:2.3:a:frappe:erpnext:11.1.27
  • Frappe » Erpnext » Version: 11.1.28
    cpe:2.3:a:frappe:erpnext:11.1.28
  • Frappe » Erpnext » Version: 11.1.29
    cpe:2.3:a:frappe:erpnext:11.1.29
  • Frappe » Erpnext » Version: 11.1.3
    cpe:2.3:a:frappe:erpnext:11.1.3
  • Frappe » Erpnext » Version: 11.1.30
    cpe:2.3:a:frappe:erpnext:11.1.30
  • Frappe » Erpnext » Version: 11.1.31
    cpe:2.3:a:frappe:erpnext:11.1.31
  • Frappe » Erpnext » Version: 11.1.32
    cpe:2.3:a:frappe:erpnext:11.1.32
  • Frappe » Erpnext » Version: 11.1.33
    cpe:2.3:a:frappe:erpnext:11.1.33
  • Frappe » Erpnext » Version: 11.1.34
    cpe:2.3:a:frappe:erpnext:11.1.34
  • Frappe » Erpnext » Version: 11.1.35
    cpe:2.3:a:frappe:erpnext:11.1.35
  • Frappe » Erpnext » Version: 11.1.36
    cpe:2.3:a:frappe:erpnext:11.1.36
  • Frappe » Erpnext » Version: 11.1.37
    cpe:2.3:a:frappe:erpnext:11.1.37
  • Frappe » Erpnext » Version: 11.1.38
    cpe:2.3:a:frappe:erpnext:11.1.38
  • Frappe » Erpnext » Version: 11.1.39
    cpe:2.3:a:frappe:erpnext:11.1.39
  • Frappe » Erpnext » Version: 11.1.4
    cpe:2.3:a:frappe:erpnext:11.1.4
  • Frappe » Erpnext » Version: 11.1.40
    cpe:2.3:a:frappe:erpnext:11.1.40
  • Frappe » Erpnext » Version: 11.1.41
    cpe:2.3:a:frappe:erpnext:11.1.41
  • Frappe » Erpnext » Version: 11.1.42
    cpe:2.3:a:frappe:erpnext:11.1.42
  • Frappe » Erpnext » Version: 11.1.43
    cpe:2.3:a:frappe:erpnext:11.1.43
  • Frappe » Erpnext » Version: 11.1.44
    cpe:2.3:a:frappe:erpnext:11.1.44
  • Frappe » Erpnext » Version: 11.1.45
    cpe:2.3:a:frappe:erpnext:11.1.45
  • Frappe » Erpnext » Version: 11.1.46
    cpe:2.3:a:frappe:erpnext:11.1.46
  • Frappe » Erpnext » Version: 11.1.47
    cpe:2.3:a:frappe:erpnext:11.1.47
  • Frappe » Erpnext » Version: 11.1.48
    cpe:2.3:a:frappe:erpnext:11.1.48
  • Frappe » Erpnext » Version: 11.1.49
    cpe:2.3:a:frappe:erpnext:11.1.49
  • Frappe » Erpnext » Version: 11.1.5
    cpe:2.3:a:frappe:erpnext:11.1.5
  • Frappe » Erpnext » Version: 11.1.50
    cpe:2.3:a:frappe:erpnext:11.1.50
  • Frappe » Erpnext » Version: 11.1.51
    cpe:2.3:a:frappe:erpnext:11.1.51
  • Frappe » Erpnext » Version: 11.1.52
    cpe:2.3:a:frappe:erpnext:11.1.52
  • Frappe » Erpnext » Version: 11.1.53
    cpe:2.3:a:frappe:erpnext:11.1.53
  • Frappe » Erpnext » Version: 11.1.54
    cpe:2.3:a:frappe:erpnext:11.1.54
  • Frappe » Erpnext » Version: 11.1.55
    cpe:2.3:a:frappe:erpnext:11.1.55
  • Frappe » Erpnext » Version: 11.1.56
    cpe:2.3:a:frappe:erpnext:11.1.56
  • Frappe » Erpnext » Version: 11.1.6
    cpe:2.3:a:frappe:erpnext:11.1.6
  • Frappe » Erpnext » Version: 11.1.7
    cpe:2.3:a:frappe:erpnext:11.1.7
  • Frappe » Erpnext » Version: 11.1.78
    cpe:2.3:a:frappe:erpnext:11.1.78
  • Frappe » Erpnext » Version: 11.1.8
    cpe:2.3:a:frappe:erpnext:11.1.8
  • Frappe » Erpnext » Version: 11.1.9
    cpe:2.3:a:frappe:erpnext:11.1.9
  • Frappe » Erpnext » Version: 11.x.x-develop_b1036e5
    cpe:2.3:a:frappe:erpnext:11.x.x-develop_b1036e5
  • Frappe » Erpnext » Version: 12.0.0
    cpe:2.3:a:frappe:erpnext:12.0.0
  • Frappe » Erpnext » Version: 12.0.1
    cpe:2.3:a:frappe:erpnext:12.0.1
  • Frappe » Erpnext » Version: 12.0.2
    cpe:2.3:a:frappe:erpnext:12.0.2
  • Frappe » Erpnext » Version: 12.0.3
    cpe:2.3:a:frappe:erpnext:12.0.3
  • Frappe » Erpnext » Version: 12.0.4
    cpe:2.3:a:frappe:erpnext:12.0.4
  • Frappe » Erpnext » Version: 12.0.5
    cpe:2.3:a:frappe:erpnext:12.0.5
  • Frappe » Erpnext » Version: 12.0.6
    cpe:2.3:a:frappe:erpnext:12.0.6
  • Frappe » Erpnext » Version: 12.0.7
    cpe:2.3:a:frappe:erpnext:12.0.7
  • Frappe » Erpnext » Version: 12.0.8
    cpe:2.3:a:frappe:erpnext:12.0.8
  • Frappe » Erpnext » Version: 12.0.9
    cpe:2.3:a:frappe:erpnext:12.0.9
  • Frappe » Erpnext » Version: 12.1.0
    cpe:2.3:a:frappe:erpnext:12.1.0
  • Frappe » Erpnext » Version: 12.1.1
    cpe:2.3:a:frappe:erpnext:12.1.1
  • Frappe » Erpnext » Version: 12.1.2
    cpe:2.3:a:frappe:erpnext:12.1.2
  • Frappe » Erpnext » Version: 12.1.3
    cpe:2.3:a:frappe:erpnext:12.1.3
  • Frappe » Erpnext » Version: 12.1.4
    cpe:2.3:a:frappe:erpnext:12.1.4
  • Frappe » Erpnext » Version: 12.1.5
    cpe:2.3:a:frappe:erpnext:12.1.5
  • Frappe » Erpnext » Version: 12.1.6
    cpe:2.3:a:frappe:erpnext:12.1.6
  • Frappe » Erpnext » Version: 12.1.7
    cpe:2.3:a:frappe:erpnext:12.1.7
  • Frappe » Erpnext » Version: 12.1.8
    cpe:2.3:a:frappe:erpnext:12.1.8
  • Frappe » Erpnext » Version: 12.10.0
    cpe:2.3:a:frappe:erpnext:12.10.0
  • Frappe » Erpnext » Version: 12.10.1
    cpe:2.3:a:frappe:erpnext:12.10.1
  • Frappe » Erpnext » Version: 12.11.0
    cpe:2.3:a:frappe:erpnext:12.11.0
  • Frappe » Erpnext » Version: 12.11.1
    cpe:2.3:a:frappe:erpnext:12.11.1
  • Frappe » Erpnext » Version: 12.11.2
    cpe:2.3:a:frappe:erpnext:12.11.2
  • Frappe » Erpnext » Version: 12.12.0
    cpe:2.3:a:frappe:erpnext:12.12.0
  • Frappe » Erpnext » Version: 12.12.1
    cpe:2.3:a:frappe:erpnext:12.12.1
  • Frappe » Erpnext » Version: 12.13.0
    cpe:2.3:a:frappe:erpnext:12.13.0
  • Frappe » Erpnext » Version: 12.14.0
    cpe:2.3:a:frappe:erpnext:12.14.0
  • Frappe » Erpnext » Version: 12.15.0
    cpe:2.3:a:frappe:erpnext:12.15.0
  • Frappe » Erpnext » Version: 12.16.0
    cpe:2.3:a:frappe:erpnext:12.16.0
  • Frappe » Erpnext » Version: 12.16.1
    cpe:2.3:a:frappe:erpnext:12.16.1
  • Frappe » Erpnext » Version: 12.16.2
    cpe:2.3:a:frappe:erpnext:12.16.2
  • Frappe » Erpnext » Version: 12.17.0
    cpe:2.3:a:frappe:erpnext:12.17.0
  • Frappe » Erpnext » Version: 12.18.0
    cpe:2.3:a:frappe:erpnext:12.18.0
  • Frappe » Erpnext » Version: 12.19.0
    cpe:2.3:a:frappe:erpnext:12.19.0
  • Frappe » Erpnext » Version: 12.2.0
    cpe:2.3:a:frappe:erpnext:12.2.0
  • Frappe » Erpnext » Version: 12.2.1
    cpe:2.3:a:frappe:erpnext:12.2.1
  • Frappe » Erpnext » Version: 12.2.2
    cpe:2.3:a:frappe:erpnext:12.2.2
  • Frappe » Erpnext » Version: 12.2.3
    cpe:2.3:a:frappe:erpnext:12.2.3
  • Frappe » Erpnext » Version: 12.20.0
    cpe:2.3:a:frappe:erpnext:12.20.0
  • Frappe » Erpnext » Version: 12.21.0
    cpe:2.3:a:frappe:erpnext:12.21.0
  • Frappe » Erpnext » Version: 12.23.0
    cpe:2.3:a:frappe:erpnext:12.23.0
  • Frappe » Erpnext » Version: 12.24.0
    cpe:2.3:a:frappe:erpnext:12.24.0
  • Frappe » Erpnext » Version: 12.25.0
    cpe:2.3:a:frappe:erpnext:12.25.0
  • Frappe » Erpnext » Version: 12.26.0
    cpe:2.3:a:frappe:erpnext:12.26.0
  • Frappe » Erpnext » Version: 12.27.0
    cpe:2.3:a:frappe:erpnext:12.27.0
  • Frappe » Erpnext » Version: 12.28.0
    cpe:2.3:a:frappe:erpnext:12.28.0
  • Frappe » Erpnext » Version: 12.29.0
    cpe:2.3:a:frappe:erpnext:12.29.0
  • Frappe » Erpnext » Version: 12.3.0
    cpe:2.3:a:frappe:erpnext:12.3.0
  • Frappe » Erpnext » Version: 12.3.1
    cpe:2.3:a:frappe:erpnext:12.3.1
  • Frappe » Erpnext » Version: 12.30.0
    cpe:2.3:a:frappe:erpnext:12.30.0
  • Frappe » Erpnext » Version: 12.30.1
    cpe:2.3:a:frappe:erpnext:12.30.1
  • Frappe » Erpnext » Version: 12.4.0
    cpe:2.3:a:frappe:erpnext:12.4.0
  • Frappe » Erpnext » Version: 12.4.1
    cpe:2.3:a:frappe:erpnext:12.4.1
  • Frappe » Erpnext » Version: 12.4.2
    cpe:2.3:a:frappe:erpnext:12.4.2
  • Frappe » Erpnext » Version: 12.4.3
    cpe:2.3:a:frappe:erpnext:12.4.3
  • Frappe » Erpnext » Version: 12.5.0
    cpe:2.3:a:frappe:erpnext:12.5.0
  • Frappe » Erpnext » Version: 12.5.1
    cpe:2.3:a:frappe:erpnext:12.5.1
  • Frappe » Erpnext » Version: 12.5.2
    cpe:2.3:a:frappe:erpnext:12.5.2
  • Frappe » Erpnext » Version: 12.6.0
    cpe:2.3:a:frappe:erpnext:12.6.0
  • Frappe » Erpnext » Version: 12.7.0
    cpe:2.3:a:frappe:erpnext:12.7.0
  • Frappe » Erpnext » Version: 12.7.1
    cpe:2.3:a:frappe:erpnext:12.7.1
  • Frappe » Erpnext » Version: 12.8.0
    cpe:2.3:a:frappe:erpnext:12.8.0
  • Frappe » Erpnext » Version: 12.9.0
    cpe:2.3:a:frappe:erpnext:12.9.0
  • Frappe » Erpnext » Version: 12.9.1
    cpe:2.3:a:frappe:erpnext:12.9.1
  • Frappe » Erpnext » Version: 12.9.2
    cpe:2.3:a:frappe:erpnext:12.9.2
  • Frappe » Erpnext » Version: 12.9.3
    cpe:2.3:a:frappe:erpnext:12.9.3
  • Frappe » Erpnext » Version: 12.9.4
    cpe:2.3:a:frappe:erpnext:12.9.4
  • Frappe » Erpnext » Version: 13.0.0
    cpe:2.3:a:frappe:erpnext:13.0.0
  • Frappe » Erpnext » Version: 13.0.1
    cpe:2.3:a:frappe:erpnext:13.0.1
  • Frappe » Erpnext » Version: 13.0.2
    cpe:2.3:a:frappe:erpnext:13.0.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved