CVE-2022-47003

CriticalCVSS 9.8

Published: 01/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.64%

88th percentile - higher than 88% of all known CVEs

Summary

The Remember Me function in Mura CMS before version 10.0.580 contains a vulnerability that allows attackers to bypass authentication via a crafted web request. The flaw stems from improper validation of session tokens.

Risk Assessment

An attacker can gain unauthorized access to user accounts, leading to data theft, privilege escalation, or full compromise of the CMS system.

Recommendation

Immediately upgrade Mura CMS to version 10.0.580 or later. If upgrading is not possible, temporarily disable the Remember Me function.

Original NVD description (English source)

A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.