CVE-2022-31263

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-312647.5Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF pCVE-2022-312658.8The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replayCVE-2022-312664.3In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounCVE-2022-312679.8Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as anCVE-2022-312687.5A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-ICVE-2022-312698.2Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's dooCVE-2022-31275.4Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.CVE-2022-312739.8An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted sesCVE-2022-312778.8Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictCVE-2022-31284.8The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege uCVE-2022-312825.5Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.CVE-2022-312855.5An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h.
CVE-2022-31263: Medium severity, CVSS 5.3 | Vulnix