CVE-2022-3511

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Nov 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-351105.5SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.CVE-2022-351115.5SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) atCVE-2022-351135.5SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c.CVE-2022-351145.5SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c.CVE-2022-351159.8IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webCVE-2022-351174.8Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.phpCVE-2022-351186.1PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.CVE-2022-35128.8Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in CVE-2022-351208.8IXPdata EasyInstall 6.6.14725 contains an access control issue.CVE-2022-351219.8Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.CVE-2022-351229.1An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive infoCVE-2022-35136.1An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.
CVE-2022-3511: Medium severity, CVSS 6.5 | Vulnix