CVE-2022-32277 - CVE House
Back to Database
Status published Medium CVE-2022-32277

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct...

Vulnerability Description

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details. NOTE: this is disputed by both the vendor and the original discoverer because it is a site-specific finding, not a finding about the Squiz Matrix CMS product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-32277

Credits & Attribution

No credits recorded in the NVD database.

References

More from squiz

View All →
CVE-2019-19374
An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS...
Critical 9.1
CVE-2019-19373
An issue was discovered in Squiz Matrix CMS 5.5.0 prior...
High 7.5
CVE-2017-14198
An issue was discovered in Squiz Matrix before 5.3.6.1 and...
High 8.8
CVE-2017-14197
An issue was discovered in Squiz Matrix before 5.3.6.1 and...
Medium 6.1
CVE-2017-14196
An issue was discovered in Squiz Matrix from 5.3 through...
High 7.5

Affected Vendor

Affected Software

matrix
Vulnerable Versions:
6.20

Timeline

Official Publish: September 6th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.