CVE-2022-29287

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current user. The exported XML contains every option of the exported user (even the hashed password).

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Apr 16, 2022
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-29296.5In ISC DHCP 1.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1 a system with access to a DHCP server, sending DHCP packets crafted to inclu CVE-2022-292966.1A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbit CVE-2022-292987.5SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.CVE-2022-29307.8Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.CVE-2022-293025.5SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.CVE-2022-293039.8SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.CVE-2022-293048.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.CVE-2022-293058.1imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.CVE-2022-293069.8IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php CVE-2022-293079.8IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang CVE-2022-293097.5mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.CVE-2022-29317.5A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15