CVE-2022-4014

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this vulnerability is VDB-213788.

• CWE-863
• CWE-352

• https://vuldb.com/?id.213788Permissions Required, Third Party Advisory
• https://vuldb.com/?id.213788Permissions Required, Third Party Advisory

Published

Nov 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40134An information leak vulnerability in the SMI Set BIOS Passwo…4.4
• CVE-2022-40135An information leak vulnerability in the Smart USB Protectio…4.4
• CVE-2022-40136An information leak vulnerability in SMI Handler used to con…4.4
• CVE-2022-40137A buffer overflow in the WMI SMI Handler in some Lenovo mode…6.7
• CVE-2022-40138An integer conversion error in Hermes bytecode generation, p…9.8
• CVE-2022-40139Improper validation of some components used by the rollback …7.2
• CVE-2022-40140An origin validation error vulnerability in Trend Micro Apex…5.5
• CVE-2022-40141A vulnerability in Trend Micro Apex One and Apex One as a Se…7.5
• CVE-2022-40142A security link following local privilege escalation vulnera…7.8
• CVE-2022-40143A link following local privilege escalation vulnerability in…7.3
• CVE-2022-40144A vulnerability in Trend Micro Apex One and Trend Micro Apex…9.8
• CVE-2022-40145This vulnerable is about a potential code injection when an …9.8