CVE-2022-45113 - OpenCVE

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Sixapart	Movable Type

Configuration 1 [-]

OR	cpe:2.3:a:sixapart:movable_type:::::premium:::*
	cpe:2.3:a:sixapart:movable_type:::::premium_advanced:::*
	cpe:2.3:a:sixapart:movable_type:::::-:::*
	cpe:2.3:a:sixapart:movable_type:::::advanced:::*
	cpe:2.3:a:sixapart:movable_type:::::-:::*
	cpe:2.3:a:sixapart:movable_type:::::advanced:::*

References

Link	Resource
https://jvn.jp/en/jp/JVN37014768/index.html	Third Party Advisory
https://movabletype.org/news/2022/11/mt-796-688-released.html	Release Notes Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: jpcert

Published: 2022-12-07T00:00:00

Updated: 2022-12-07T00:00:00

Reserved: 2022-11-15T00:00:00

Link: CVE-2022-45113

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-12-07T04:15:11.233

Modified: 2022-12-12T15:15:58.013

Link: CVE-2022-45113

JSON object: View

Redhat Information

No data.

CWE

CWE-20

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*", "matchCriteriaId": "4EBDEEB4-E2A9-4D7B-AAFF-8657E9708A24", "versionEndIncluding": "1.53", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*", "matchCriteriaId": "7A3C1F5D-755D-4FC4-975D-314C602BE0D4", "versionEndIncluding": "1.53", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:*:*:*", "matchCriteriaId": "F9375A34-27A6-4597-8F7B-14BF40DC8B7E", "versionEndExcluding": "6.8.7", "versionStartIncluding": "6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*", "matchCriteriaId": "B43BD207-E293-4617-B1C7-5EE7F095BFDE", "versionEndExcluding": "6.8.7", "versionStartIncluding": "6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:*:*:*", "matchCriteriaId": "7EBB4183-9E9B-4686-9692-0223FAA34019", "versionEndExcluding": "7.9.6", "versionStartIncluding": "7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*", "matchCriteriaId": "123C8E47-C983-401D-A081-033E94E112D0", "versionEndExcluding": "7.9.6", "versionStartIncluding": "7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier."}, {"lang": "es", "value": "Existe una validaci\u00f3n inadecuada de la correcci\u00f3n sint\u00e1ctica de la vulnerabilidad de entrada en la serie Movable Type. Hacer que un usuario acceda a una URL especialmente manipulada puede permitir que un atacante remoto no autenticado establezca una URL especialmente manipulada para la p\u00e1gina Restablecer contrase\u00f1a y realice un ataque de phishing. Los productos/versiones afectados son los siguientes: Movable Type 7 r.5301 y anteriores (Serie Movable Type 7), Movable Type Advanced 7 r.5301 y anteriores (Serie Movable Type Advanced 7), Movable Type 6.8.7 y anteriores (Movable Type 6), Movable Type Advanced 6.8.7 y anteriores (Movable Type Advanced 6 Series), Movable Type Premium 1.53 y anteriores, y Movable Type Premium Advanced 1.53 y anteriores."}], "id": "CVE-2022-45113", "lastModified": "2022-12-12T15:15:58.013", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-07T04:15:11.233", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/jp/JVN37014768/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://movabletype.org/news/2022/11/mt-796-688-released.html"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}