CVE-2022-0916

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287 CWE-352

Affected software

No affected versions have been published.

Timeline

Published: May 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-09187.5A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to c CVE-2022-09195.3The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any CVE-2022-09207.5The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could CVE-2022-09216.7Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.CVE-2022-09226.5The software does not perform any authentication for critical system functionality.CVE-2022-09239.8Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ash CVE-2022-09245.5Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that co CVE-2022-09264.8File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.CVE-2022-09285.4Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.CVE-2022-09296.1XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.CVE-2022-09304.8File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.CVE-2022-09326.5Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2.