Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-45113

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

Published

2022-12-07T04:15:11.233

Last Modified

2025-04-23T16:15:27.900

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-20
  • Type: Secondary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sixapart movable_type ≤ 1.53 Yes
Application sixapart movable_type ≤ 1.53 Yes
Application sixapart movable_type < 6.8.7 Yes
Application sixapart movable_type < 6.8.7 Yes
Application sixapart movable_type < 7.9.6 Yes
Application sixapart movable_type < 7.9.6 Yes
References