Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2022-25319
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.004
EPSS Ranking
59.8%
CVSS Severity
CVSS v3 Score
5.3
CVSS v2 Score
5.0
References
https://github.com/cerebrate-project/cerebrate/commit/a2632349175e574cd6305fa459cd7610ea09ab61
https://zigrin.com/advisories/cerebrate-endpoints-could-be-open-when-not-enabled/
https://zigrin.com/cakephp-application-cybersecurity-research-forgotten-endpoint-authentication-bypass-with-open-prefix/
https://github.com/cerebrate-project/cerebrate/commit/a2632349175e574cd6305fa459cd7610ea09ab61
https://zigrin.com/advisories/cerebrate-endpoints-could-be-open-when-not-enabled/
https://zigrin.com/cakephp-application-cybersecurity-research-forgotten-endpoint-authentication-bypass-with-open-prefix/
Products affected by CVE-2022-25319
Cerebrate-Project
»
Cerebrate
»
Version:
0.1
cpe:2.3:a:cerebrate-project:cerebrate:0.1
Cerebrate-Project
»
Cerebrate
»
Version:
0.2
cpe:2.3:a:cerebrate-project:cerebrate:0.2
Cerebrate-Project
»
Cerebrate
»
Version:
0.3
cpe:2.3:a:cerebrate-project:cerebrate:0.3
Cerebrate-Project
»
Cerebrate
»
Version:
1.0
cpe:2.3:a:cerebrate-project:cerebrate:1.0
Cerebrate-Project
»
Cerebrate
»
Version:
1.1
cpe:2.3:a:cerebrate-project:cerebrate:1.1
Cerebrate-Project
»
Cerebrate
»
Version:
1.1.1
cpe:2.3:a:cerebrate-project:cerebrate:1.1.1
Cerebrate-Project
»
Cerebrate
»
Version:
1.2
cpe:2.3:a:cerebrate-project:cerebrate:1.2
Cerebrate-Project
»
Cerebrate
»
Version:
1.3
cpe:2.3:a:cerebrate-project:cerebrate:1.3
Cerebrate-Project
»
Cerebrate
»
Version:
1.4
cpe:2.3:a:cerebrate-project:cerebrate:1.4
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved