CVE-2022-24781

    Dashboard / Vulnerabilities / CVE-2022-24781

    CVE-2022-24781

    Published: 24 Mar 2022Last Modified: 12 Aug 2026

    Summary: Malicious users can take over the session of other players

    Details: Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through the browser console and become co-owners of the target session. This issue is patched in version 1.1.0. No known workaround exists.

    References: https://github.com/math-geon/Geon/releases/tag/v1.1.0, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24781.json, https://github.com/math-geon/Geon/security/advisories/GHSA-4fv9-g2jh-j5xm, https://nvd.nist.gov/vuln/detail/CVE-2022-24781, https://github.com/math-geon/Geon/commit/005456d752d5434b60026edbc83b2665b8557d19

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 512265521dc0015ddbd2ee3589ccfda307a10df2
    Fixed -005456d752d5434b60026edbc83b2665b8557d19

    Affected versions

    1.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-24781 | CVE-DB