Wiki Js CVE-2022-1681

HIGH

Authentication Bypass Using an Alternate Path or Channel (CWE-288)

2022-05-12 security@huntr.dev

Authentication Bypass Wiki Js

7.2

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

May 12, 2022 - 08:15 nvd

HIGH 7.2

DescriptionNVD

Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions

AnalysisAI

Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-288. Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions Affected products include: Requarks Wiki.Js. Version information: prior to 2.5.281..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Wiki Js

View all

CVE-2021-25993 MEDIUM This Month POC

In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged

CVE-2021-43856 MEDIUM This Month POC

Wiki.js is a wiki app built on Node.js. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, lo

CVE-2021-43855 MEDIUM This Month POC

Wiki.js is a wiki app built on node.js. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, lo

CVE-2021-21383 MEDIUM This Month POC

Wiki.js an open-source wiki app built on Node.js. Rated medium severity (CVSS 5.4), this vulnerability is remotely explo

CVE-2021-43800 HIGH This Week

Wiki.js is a wiki app built on Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no a

CVE-2020-15236 HIGH This Week

In Wiki.js before version 2.5.151, directory traversal outside of Wiki.js context is possible when a storage module with

CVE-2022-23654 MEDIUM This Month

Wiki.js is a wiki app built on Node.js. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, lo

CVE-2020-4052 MEDIUM This Month

In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. Rated medium severity (CVS

CVE-2021-43842 MEDIUM This Month

Wiki.js is a wiki app built on Node.js. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, lo

CVE-2020-15274 MEDIUM This Month

In Wiki.js before version 2.5.162, an XSS payload can be injected in a page title and executed via the search results. R

CVE-2020-11051 MEDIUM This Month

In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. Rated medium severity (CVSS 4.8), this vulnerabi

CVE-2025-56643 CRITICAL This Week

Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. Rated critical s

Same weakness CWE-288 – Authentication Bypass Using an Alternate Path or Channel

View all

CVE-2024-1709 CRITICAL POC

CVE-2020-10148 CRITICAL POC

CVE-2024-55591 CRITICAL POC

CVE-2025-2747 CRITICAL POC

CVE-2025-2746 CRITICAL POC

CVE-2025-4427 MEDIUM POC

CVE-2025-34026 CRITICAL POC

CVE-2026-23760 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2022-1681 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy