Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.5
CVE-2022-0238: Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite
CVE-2022-0238 · published 4 years ago
Summary
phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| phoronix-media | phoronix_test_suite |
<= 10.8.0 cpe:2.3:a:phoronix-media:phoronix_test_suite:*:*:*:*:*:*:*:* |
| fedoraproject | fedora |
34 35 cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
Original advisory text
Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite
phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
References
- https://huntr.dev/bounties/63f24b24-4af2-47b8-baea-7ad5f4db3633 URL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0238.j... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-0238 Vendor Advisory
- https://github.com/phoronix-test-suite/phoronix-test-suite/commit/5755b3bf979cd0... Patch
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
4.5
Medium
Type
CWE-352Cross-Site Request Forgery (CSRF)
Timeline
Published16 Jan 2022
Updated4 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta