CVE-2022-4281

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266CWE-269

Affected software

VendorProductVersions
unspecifiedFacepay1.0

References

Timeline

Published
Dec 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-428105.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 1CVE-2022-428115.5An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura CVE-2022-428139.8A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed CVE-2022-428145.5A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.CVE-2022-428155.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiveCVE-2022-428165.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected CVE-2022-428176.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watCVE-2022-428185.9This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position mayCVE-2022-428195.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS MontereyCVE-2022-42827.2A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the componentCVE-2022-428207.8A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An CVE-2022-428215.5A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An a
CVE-2022-4281: High severity, CVSS 8.8 | Vulnix