CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 36b2d4abe20a6245e4f8df7a4b14e130b24d429d. It is recommended to apply a patch to fix this issue. VDB-215250 is the identifier assigned to this vulnerability.

• CWE-863
• CWE-352

• https://github.com/morontt/zend-blog-number-2/commit/36b2d4abe20a6245e4f8df7a4b14e130b24d429dPatch, Third Party Advisory
• https://vuldb.com/?id.215250Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/morontt/zend-blog-number-2/commit/36b2d4abe20a6245e4f8df7a4b14e130b24d429dPatch, Third Party Advisory
• https://vuldb.com/?id.215250Permissions Required, Third Party Advisory, VDB Entry

Published

Dec 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43958A vulnerability has been identified in QMS Automotive (All v…7.6
• CVE-2022-43959Insufficiently Protected Credentials in the AD/LDAP server s…4.9
• CVE-2022-4396A vulnerability was found in RDFlib pyrdfa3 and classified a…5.4
• CVE-2022-43967Concrete CMS (formerly concrete5) below 8.5.10 and between 9…6.1
• CVE-2022-43968Concrete CMS (formerly concrete5) below 8.5.10 and between 9…6.1
• CVE-2022-43969Ricoh mp_c4504ex devices with firmware 1.06 mishandle creden…9.1
• CVE-2022-43970A buffer overflow vulnerability exists in Linksys WRT54GL Wi…7.2
• CVE-2022-43971An arbitrary code exection vulnerability exists in Linksys W…7.2
• CVE-2022-43972A null pointer dereference vulnerability exists in Linksys W…7.5
• CVE-2022-43973An arbitrary code execution vulnerability exisits in Linksys…7.2
• CVE-2022-43974MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in mat…9.8
• CVE-2022-43975An issue was discovered in FC46-WebBridge on GE Grid Solutio…7.5