CVE-2022-1848: Business Logic Errors in Para

May 25, 2022 (updated August 11, 2022)

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

References

github.com/advisories/GHSA-4793-8wwh-jxxr
github.com/erudika/para/commit/fa677c629842df60099daa9c23bd802bc41b48d1
huntr.dev/bounties/8dfe0877-e44b-4a1a-8eee-5c03c93ae90a
nvd.nist.gov/vuln/detail/CVE-2022-1848

Code Behaviors & Features

Detect and mitigate CVE-2022-1848 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →