CVE-2022-31185

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's email being leaked, which may be problematic if your email needs to remain private for any reason. Users hosting their own mprweb instance will need to upgrade to the latest commit to get this fixed. Users on the official instance will already have this issue fixed.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Aug 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-311863.3NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-autCVE-2022-311875.4GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service DCVE-2022-311889.8CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to aCVE-2022-311895.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-31197.5The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could aCVE-2022-311905.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component fCVE-2022-311916.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311926.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311936.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311947.2DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311957.2DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImpCVE-2022-311967.5Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is tr