Vulnerability Database

296,760

Total vulnerabilities in the database

CVE-2022-24740

Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the react-cookie library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the react-cookie package to 4.1.1 and then override all Volto components that use this library.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
plone / volto 15.0.0-alpha0 15.0.0-alpha0.x
plone / volto 14.1.0 14.10.0.x
plone / volto 14.0.0 14.0.0.x
plone / volto 14.0.0-alpha7 14.0.0-alpha7.x
plone / volto 14.0.0-alpha8 14.0.0-alpha8.x
plone / volto 14.0.0-alpha9 14.0.0-alpha9.x
plone / volto 14.0.0-alpha10 14.0.0-alpha10.x
plone / volto 14.0.0-alpha11 14.0.0-alpha11.x
plone / volto 14.0.0-alpha12 14.0.0-alpha12.x
plone / volto 14.0.0-alpha13 14.0.0-alpha13.x
plone / volto 14.0.0-alpha14 14.0.0-alpha14.x
plone / volto 14.0.0-alpha15 14.0.0-alpha15.x
plone / volto 14.0.0-alpha16 14.0.0-alpha16.x
plone / volto 14.0.0-alpha17 14.0.0-alpha17.x
plone / volto 14.0.0-alpha18 14.0.0-alpha18.x
plone / volto 14.0.0-alpha19 14.0.0-alpha19.x
plone / volto 14.0.0-alpha20 14.0.0-alpha20.x
plone / volto 14.0.0-alpha21 14.0.0-alpha21.x
plone / volto 14.0.0-alpha22 14.0.0-alpha22.x
plone / volto 14.0.0-alpha23 14.0.0-alpha23.x
plone / volto 14.0.0-alpha24 14.0.0-alpha24.x
plone / volto 14.0.0-alpha25 14.0.0-alpha25.x
plone / volto 14.0.0-alpha26 14.0.0-alpha26.x
plone / volto 14.0.0-alpha27 14.0.0-alpha27.x
plone / volto 14.0.0-alpha28 14.0.0-alpha28.x
plone / volto 14.0.0-alpha29 14.0.0-alpha29.x
plone / volto 14.0.0-alpha30 14.0.0-alpha30.x
plone / volto 14.0.0-alpha31 14.0.0-alpha31.x
plone / volto 14.0.0-alpha32 14.0.0-alpha32.x
plone / volto 14.0.0-alpha33 14.0.0-alpha33.x
plone / volto 14.0.0-alpha34 14.0.0-alpha34.x
plone / volto 14.0.0-alpha35 14.0.0-alpha35.x
plone / volto 14.0.0-alpha36 14.0.0-alpha36.x
plone / volto 14.0.0-alpha37 14.0.0-alpha37.x
plone / volto 14.0.0-alpha38 14.0.0-alpha38.x
plone / volto 14.0.0-alpha39 14.0.0-alpha39.x
plone / volto 14.0.0-alpha40 14.0.0-alpha40.x
plone / volto 14.0.0-alpha41 14.0.0-alpha41.x
plone / volto 14.0.0-alpha42 14.0.0-alpha42.x
plone / volto 14.0.0-alpha43 14.0.0-alpha43.x
plone / volto 14.0.0-alpha6 14.0.0-alpha6.x
Node.js icon @plone / volto 14.0.0-alpha.6 15.0.0-alpha.0