CVE-2022-1073CWE-640
Automatic Question Paper Generator password recovery
High · published March 29, 2022
What it is
A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely.
The record
Technical detail
- CVSS v3.1
- 7.3 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00806 · 56.4th percentile
- Weakness
- CWE-640 · Weak Password Recovery Mechanism for Forgotten Password
- Published
- 2022-03-29T05:50Z
EPSS history
Timeline