CVE-2022-35253

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

Published

Sep 23, 2022

Last Modified

Nov 7, 2023

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35248A improper authentication vulnerability exists in Rocket.Cha…8.8
• CVE-2022-35249A information disclosure vulnerability exists in Rocket.Chat…4.3
• CVE-2022-3525Deserialization of Untrusted Data in GitHub repository libre…8.8
• CVE-2022-35250A privilege escalation vulnerability exists in Rocket.chat <…4.3
• CVE-2022-35251A cross-site scripting vulnerability exists in Rocket.chat <…5.4
• CVE-2022-35252When curl is used to retrieve and parse cookies from a HTTP(…3.7
• CVE-2022-35254An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35255A weak randomness in WebCrypto keygen vulnerability exists i…9.1
• CVE-2022-35256The llhttp parser in the http module in Node v18.7.0 does no…6.5
• CVE-2022-35257A local privilege escalation vulnerability in UI Desktop for…7.8
• CVE-2022-35258An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35259XML Injection with Endpoint Manager 2022. 3 and below causin…7.8