CVE-2022-1223

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.

• CWE-863
• CWE-863

• https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953Patch, Third Party Advisory
• https://huntr.dev/bounties/baec4c23-2466-4b13-b3c0-eaf1d000d4abExploit, Third Party Advisory
• https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953Patch, Third Party Advisory
• https://huntr.dev/bounties/baec4c23-2466-4b13-b3c0-eaf1d000d4abExploit, Third Party Advisory

Published

Apr 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1217The Custom TinyMCE Shortcode Button WordPress plugin through…6.1
• CVE-2022-1218The Domain Replace WordPress plugin through 1.3.8 does not s…6.1
• CVE-2022-1219SQL injection in RecyclebinController.php in GitHub reposito…7.5
• CVE-2022-1220The FoxyShop WordPress plugin before 4.8.2 does not sanitise…6.1
• CVE-2022-1221The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 …6.1
• CVE-2022-1222Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.5.5
• CVE-2022-1224Improper Authorization in GitHub repository phpipam/phpipam …6.5
• CVE-2022-1225Incorrect Privilege Assignment in GitHub repository phpipam/…6.5
• CVE-2022-1226A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipa…4.8
• CVE-2022-1227A privilege escalation flaw was found in Podman. This flaw a…8.8
• CVE-2022-1228The Opensea WordPress plugin before 1.0.3 does not sanitize …4.8
• CVE-2022-1229This vulnerability allows remote attackers to execute arbitr…7.8