CVE-2022-22733

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.

• CWE-200
• CWE-200

• http://www.openwall.com/lists/oss-security/2022/01/20/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/qpdsm936n9bhksb0rzn6bq1h7ord2nm6Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/01/20/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/qpdsm936n9bhksb0rzn6bq1h7ord2nm6Mailing List, Vendor Advisory

Published

Jan 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22728A flaw in Apache libapreq2 versions 2.16 and earlier could c…7.5
• CVE-2022-22729CAMS for HIS Server contained in the following Yokogawa Elec…8.8
• CVE-2022-2273The Simple Membership WordPress plugin before 4.1.3 does not…8.8
• CVE-2022-22730Improper authentication in the Intel(R) Edge Insights for In…9.8
• CVE-2022-22731A CWE-22: Improper Limitation of a Pathname to a Restricted …9.8
• CVE-2022-22732A CWE-668: Exposure of Resource to Wrong Sphere vulnerabilit…7.5
• CVE-2022-22734The Simple Quotation WordPress plugin through 1.3.2 does not…6.1
• CVE-2022-22735The Simple Quotation WordPress plugin through 1.3.2 does not…8.8
• CVE-2022-22736If Firefox was installed to a world-writable directory, a lo…7
• CVE-2022-22737Constructing audio sinks could have lead to a race condition…7.5
• CVE-2022-22738Applying a CSS filter effect could have accessed out of boun…8.8
• CVE-2022-22739Malicious websites could have tricked users into accepting l…6.5