← All advisories

High severity7.5NVD Advisory· Published Aug 26, 2022· Updated Jun 17, 2026

CVE-2022-36521

CVE-2022-36521

Description

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.

Affected products

3

Cskefu/Cskefu2 versions
cpe:2.3:a:cskefu:cskefu:7.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cskefu:cskefu:7.0.1:*:*:*:*:*:*:*
- (no CPE)
Chatopera/cskefullm-create
Range: =7.0.1

Patches

Vulnerability mechanics

References

1

github.com/chatopera/cskefu/issues/724nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.