Vulnerability Details CVE-2022-4564
A vulnerability classified as problematic has been found in University of Central Florida Materia up to 9.0.0. This affects the function before of the file fuel/app/classes/controller/api.php of the component API Controller. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 9.0.1-alpha1 is able to address this issue. The name of the patch is af259115d2e8f17068e61902151ee8a9dbac397b. It is recommended to upgrade the affected component. The identifier VDB-215973 was assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.6%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2022-4564
-
cpe:2.3:a:ucf:materia:3.3.1
-
cpe:2.3:a:ucf:materia:3.4.0
-
cpe:2.3:a:ucf:materia:3.4.1
-
cpe:2.3:a:ucf:materia:3.4.2
-
cpe:2.3:a:ucf:materia:3.4.3
-
cpe:2.3:a:ucf:materia:3.5.0
-
cpe:2.3:a:ucf:materia:3.5.1
-
cpe:2.3:a:ucf:materia:3.5.2
-
cpe:2.3:a:ucf:materia:3.6.0
-
cpe:2.3:a:ucf:materia:3.6.1
-
cpe:2.3:a:ucf:materia:3.6.2
-
cpe:2.3:a:ucf:materia:3.6.3
-
cpe:2.3:a:ucf:materia:3.6.4
-
cpe:2.3:a:ucf:materia:3.6.5
-
cpe:2.3:a:ucf:materia:3.7.0
-
cpe:2.3:a:ucf:materia:4.0.0
-
cpe:2.3:a:ucf:materia:5.0.0
-
cpe:2.3:a:ucf:materia:6.0.0
-
cpe:2.3:a:ucf:materia:6.0.1
-
cpe:2.3:a:ucf:materia:6.0.2
-
cpe:2.3:a:ucf:materia:7.0.0
-
cpe:2.3:a:ucf:materia:7.0.1
-
cpe:2.3:a:ucf:materia:8.0.0
-
cpe:2.3:a:ucf:materia:8.0.1
-
cpe:2.3:a:ucf:materia:9.0.0