{"id":"CVE-2022-27157","details":"pearweb \u003c 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.","modified":"2026-08-12T03:51:39.228973696Z","published":"2022-04-15T18:00:49Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27157.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27157.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27157"},{"type":"FIX","url":"https://github.com/pear/pearweb/commit/6447c174a6b4bd76d28ecca8543cbd24bf394f99#diff-204452a70c5b0b0084097fcff6aee77c2c38cb77a41c4b2dd0065fda37a7489c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pear/pearweb","events":[{"introduced":"0"},{"fixed":"66d7899ee585005ef7b7ce5662b0b10498b7288e"},{"fixed":"6447c174a6b4bd76d28ecca8543cbd24bf394f99"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:php:pearweb:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.32.0"}]}}],"versions":["pearweb_index-1.24.0","pearweb-1.29.0","pearweb_manual-1.3.0","pearweb-1.28.1","pearweb_index-1.23.1","pearweb_manual-1.2.3","pearweb-1.26.1","pearweb_index-1.22.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27157.json"}}],"schema_version":"1.9.0"}