CVE-2022-1681

    Dashboard / Vulnerabilities / CVE-2022-1681

    CVE-2022-1681

    Published: 12 May 2022Last Modified: 12 Aug 2026

    Summary: Authentication Bypass Using an Alternate Path or Channel in requarks/wiki

    Details: Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions

    References: https://huntr.dev/bounties/591b11e1-7504-4a96-99c6-08f2b419e767, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1681.json, https://nvd.nist.gov/vuln/detail/CVE-2022-1681, https://github.com/requarks/wiki/commit/78d02dc8e5d103d248e5d7632bf7a6facdf4264c

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d9076c4ee9981e5d94310262598a1f220c5e04ce

    Affected versions

    v2.5.280
    v2.5.279
    v2.5.278
    v2.5.277
    v2.5.276
    v2.5.275

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1681 | CVE-DB