{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/62197?format=json","vulnerability_id":"VCID-x7d4-a2x4-5uh1","summary":"The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.","aliases":[{"alias":"CVE-2024-22179"}],"fixed_packages":[],"affected_packages":[],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-22179","reference_id":"","reference_type":"","scores":[{"value":"0.00075","scoring_system":"epss","scoring_elements":"0.22676","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-22179"},{"reference_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02","reference_id":"icsa-24-107-02","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"8.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-16T14:46:38Z/"}],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"}],"weaknesses":[{"cwe_id":302,"name":"Authentication Bypass by Assumed-Immutable Data","description":"The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker."}],"exploits":[],"severity_range_score":"7.5 - 8.7","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x7d4-a2x4-5uh1"}