CVE-2022-1236

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-521

Affected software

VendorProductVersions
weseekweseek/growi>= unspecified, < v5.0.0

References

Timeline

Published
Apr 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-12377.8Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be expCVE-2022-12387.8Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow anCVE-2022-12398.8The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with thCVE-2022-12407.8Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disableCVE-2022-12416.1The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to RefCVE-2022-12427.8Apport can be tricked into connecting to arbitrary sockets as the root userCVE-2022-12436.1CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.CVE-2022-12445.5heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.CVE-2022-12459.8A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding aCVE-2022-12477.0An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many CVE-2022-12487.3A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_InformatioCVE-2022-12493.3A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the
CVE-2022-1236: Medium severity, CVSS 6.5 | Vulnix