CVE-2022-45292

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2022-12-09

Last modified

2025-04-23

Weaknesses

CWE-672

Affected products

• Funkwhale (Funkwhale)

References

• https://dev.funkwhale.audio/funkwhale/funkwhale/-/issues/1952