CVE-2022-4879— Forged Alliance Forever Vote improper authorization
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-4879
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Forged Alliance Forever Vote improper authorization
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. The patch is named 6880971bd3d73d942384aff62d53058c206ce644. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217555.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Forged Alliance Forever 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Forged Alliance Forever是一个社区驱动的项目，旨在促进 Supreme Commander: Forged Alliance 的在线游戏。 Forged Alliance Forever 存在安全漏洞，该漏洞源于组件Vote Handler的未知功能，操纵导致不正确的授权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Forged Alliance Forever | 3746 | - |
II. Public POCs for CVE-2022-4879
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-4879
请登录查看更多情报信息。
- https://github.com/FAForever/fa/pull/4398issue-tracking
- https://nvd.nist.gov/vuln/detail/CVE-2022-4879
Same Patch Batch · n/a · 2023-01-06 · 15 CVEs total
| CVE-2022-25923 | 7.4 HIGH | exec-local-bin 安全漏洞 |
| CVE-2022-4878 | 5.5 MEDIUM | JATOS ZIP ZipUtil.java ZipUtil path traversal |
| CVE-2018-25067 | 5.5 MEDIUM | JoomGallery Image Sort default.php sql injection |
| CVE-2014-125053 | 5.5 MEDIUM | Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection |
| CVE-2022-39072 | ZTE MF286R和ZTE MF289D SQL注入漏洞 | |
| CVE-2022-39073 | ZTE MF286R 命令注入漏洞 | |
| CVE-2022-40049 | Theme Park Ticketing System SQL注入漏洞 | |
| CVE-2022-42979 | Ryde Technologies RYDE 信任管理问题漏洞 | |
| CVE-2022-44149 | Nexxt Router 操作系统命令注入漏洞 | |
| CVE-2022-44870 | maccms10 跨站脚本漏洞 | |
| CVE-2022-44939 | Chat Server 代码问题漏洞 | |
| CVE-2022-45911 | Zimbra Collaboration Server 跨站脚本漏洞 | |
| CVE-2022-45913 | Zimbra Collaboration Server 跨站脚本漏洞 | |
| CVE-2023-22671 | NSA Ghidra 命令注入漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-285
- CVE-2026-8241
Industrial Application Software IAS Canias ERP RMI iasGetSer - CVE-2026-42202
nova-toggle-5: Improper authorization on toggle endpoint all - CVE-2026-33823
Microsoft Team Events Portal Information Disclosure Vulnerab - CVE-2026-41572
Note Mark: Unauthenticated read of notes and assets in soft- - CVE-2026-7713
crocodilestick Calibre-Web-Automated Kobo auth-token Route k
V. Comments for CVE-2022-4879
No comments yet