CVE-2022-4823

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controllers/geopoll_controller.rb. The manipulation of the argument signature leads to observable timing discrepancy. It is possible to launch the attack remotely. The name of the patch is 77236f7fd71a0e2eefeea07f9866b069d612cf0d. It is recommended to apply a patch to fix this issue. VDB-217002 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-208CWE-203

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-482307.5There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.CVE-2022-482315.5In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privCVE-2022-482325.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482335.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482345.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482354.4In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2022-482364.4In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SystemCVE-2022-482374.4In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystCVE-2022-482384.4In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystCVE-2022-482394.4In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysCVE-2022-48245.4The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them bCVE-2022-482404.4In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Sys
CVE-2022-4823: Medium severity, CVSS 5.9 | Vulnix