CVE-2022-2651
Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 16.94%
- CWE
- CWE-305
- Published
- 2022-08-04
- Last modified
- 2026-03-13
Affected products
- bookwyrm-social bookwyrm-social/bookwyrm
Weakness type
Related vulnerabilities
- CVE-2025-31161 — CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
- CVE-2023-34124 — The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticatio
- CVE-2021-26102 — A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remot
- CVE-2023-0777 — Authentication Bypass by Primary Weakness in modoboa/modoboa
- CVE-2024-50478 — WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability
- CVE-2026-81578 — PaperCut MF/NG: Authentication Bypass
- CVE-2026-25555 — OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header
- CVE-2025-24522 — KUNBUS Revolution Pi Authentication Bypass by Primary Weakness