CVE-2022-22789

7.8 highEPSS 0.2%

High (7.8) in charactell formstorm. EPSS 0.2% chance of exploitation in the next 30 days.

Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious user can take over an account by replacing existing password in the file.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-11-01)
CWE: CWE-312
Published: 2022-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

charactell:formstorm

References

https://www.gov.il/en/departments/faq/cve_advisories
https://www.gov.il/en/departments/faq/cve_advisories

Check your stack JSON