Skip to main content

Backdrop Cms CVE-2022-34530

MEDIUM
Weak Password Recovery Mechanism for Forgotten Password (CWE-640)
2022-08-01 cve@mitre.org
Information Disclosure Backdrop Cms
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 01, 2022 - 20:15 nvd
MEDIUM 5.3

DescriptionNVD

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

AnalysisAI

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-640. An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames. Affected products include: Backdropcms Backdrop Cms.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Backdrop Cms

View all
CVE-2025-25062 MEDIUM POC
4.4 Feb 03

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. Rated medium severity (CVSS 4
CVE-2022-42092 HIGH POC
7.2 Oct 07

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Executi
CVE-2019-14771 CRITICAL
9.8 Aug 08

Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives throu
CVE-2023-31045 MEDIUM POC
4.8 Apr 24

A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attack
CVE-2022-42095 MEDIUM POC
4.8 Nov 23

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page con
CVE-2022-42096 MEDIUM POC
4.8 Nov 21

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content
CVE-2019-19902 HIGH
7.2 Dec 19

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. Rated high severity (CVSS 7.2), t
CVE-2024-54123 MEDIUM
6.1 Nov 29

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text
CVE-2025-44141 MEDIUM
6.1 Jun 26

A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.
CVE-2019-19903 MEDIUM
4.8 Dec 19

An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. Rated medium severity (CVSS 4.8), this vulnerability is re
CVE-2019-19901 MEDIUM
4.8 Dec 19

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. Rated medium severity (CVSS 4.8),
CVE-2019-19900 MEDIUM
4.8 Dec 19

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. Rated medium severity (CVSS 4.8),

Same weakness CWE-640 – Weak Password Recovery Mechanism for Forgotten Password

View all
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-7615 HIGH POC
8.8
CVE-2017-8295 MEDIUM POC
5.9
CVE-2025-6216 CRITICAL POC
9.8
CVE-2025-47646 CRITICAL POC
9.8
CVE-2015-7257 HIGH POC
7.5
CVE-2022-50910 CRITICAL POC
9.8
CVE-2026-12417 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-34530 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy