CVE-2022-3582

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-863CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Oct 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-358207.8Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2022-358214.4Azure Sphere Information Disclosure VulnerabilityCVE-2022-358227.1Windows Defender Credential Guard Security Feature Bypass VulnerabilityCVE-2022-358238.8Microsoft SharePoint Remote Code Execution VulnerabilityCVE-2022-358247.2Azure Site Recovery Remote Code Execution VulnerabilityCVE-2022-358258.8Visual Studio Remote Code Execution VulnerabilityCVE-2022-358268.8Visual Studio Remote Code Execution VulnerabilityCVE-2022-358278.8Visual Studio Remote Code Execution VulnerabilityCVE-2022-358287.8Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityCVE-2022-358294.8Service Fabric Explorer Spoofing VulnerabilityCVE-2022-35839.8A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknCVE-2022-358308.1Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-3582: Low severity, CVSS 3.5 | Vulnix