CVE-2022-29950
Summary
| CVE | CVE-2022-29950 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-05-04 15:15:00 UTC |
| Updated | 2023-11-07 03:46:00 UTC |
| Description | ** DISPUTED ** Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PoC of Modification of Assumed-Immutable Data (MAID) vulnerability in Experian Hunter 1.16 via (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page (CVE-2022-29950) · GitHub | MISC | gist.github.com | |
| Hunter – Experian | MISC | www.experian.in | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.