CVE-2022-4823

A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controllers/geopoll_controller.rb. The manipulation of the argument signature leads to observable timing discrepancy. It is possible to launch the attack remotely. The name of the patch is 77236f7fd71a0e2eefeea07f9866b069d612cf0d. It is recommended to apply a patch to fix this issue. VDB-217002 is the identifier assigned to this vulnerability.

• CWE-208
• CWE-203

• https://github.com/instedd/nuntium/commit/77236f7fd71a0e2eefeea07f9866b069d612cf0dPatch, Third Party Advisory
• https://vuldb.com/?ctiid.217002Third Party Advisory
• https://vuldb.com/?id.217002Third Party Advisory
• https://github.com/instedd/nuntium/commit/77236f7fd71a0e2eefeea07f9866b069d612cf0dPatch, Third Party Advisory
• https://vuldb.com/?ctiid.217002Third Party Advisory
• https://vuldb.com/?id.217002Third Party Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48223An issue was discovered in Acuant AcuFill SDK before 10.22.0…6.7
• CVE-2022-48224An issue was discovered in Acuant AcuFill SDK before 10.22.0…7.3
• CVE-2022-48225An issue was discovered in Acuant AcuFill SDK before 10.22.0…7.3
• CVE-2022-48226An issue was discovered in Acuant AcuFill SDK before 10.22.0…7.8
• CVE-2022-48227An issue was discovered in Acuant AsureID Sentinel before 5.…7.8
• CVE-2022-48228An issue was discovered in Acuant AsureID Sentinel before 5.…5.5
• CVE-2022-48230There is a misinterpretation of input vulnerability in BiShe…7.5
• CVE-2022-48231In soter service, there is a possible missing permission che…5.5
• CVE-2022-48232In FM service , there is a possible missing params check. Th…5.5
• CVE-2022-48233In FM service , there is a possible missing params check. Th…5.5
• CVE-2022-48234In FM service , there is a possible missing params check. Th…5.5
• CVE-2022-48235In MP3 encoder, there is a possible out of bounds write due …4.4