CVE-2022-2821

    Dashboard / Vulnerabilities / CVE-2022-2821

    CVE-2022-2821

    Published: 15 Aug 2022Last Modified: 12 Aug 2026

    Summary: Missing Critical Step in Authentication in namelessmc/nameless

    Details: Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

    References: https://huntr.dev/bounties/c216db15-fe2f-42a7-852a-6c47498cf069, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2821.json, https://nvd.nist.gov/vuln/detail/CVE-2022-2821, https://github.com/namelessmc/nameless/commit/98fe4b7fce5509e49e71f1357118db887b8b88e0

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -26bbbae0a8cfbd50a28e226970737d5cd9d5fd62

    Affected versions

    v2.0.1
    v2.0.0
    v2.0.0-pr13
    v2.0.0-pr11
    v2.0.0-pr10
    v2.0.0-pr8
    v2.0.0-pr7
    v2.0.0-pr6
    v2.0.0-pr5
    v2.0.0-pr4
    v2.0.0-pr3
    v2.0.0-pr2
    v2.0.0-pr1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-2821 | CVE-DB