CVE-2024-22047

A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.

CVSS 3.1

3.1CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-29)

CWE

CWE-362

Published

2024-01-04

Modified

2026-10-29

Record from

the NVD, synced 2026-10-29

Affected

• collectiveidea:audited

Packages (OSV)

References

• https://github.com/advisories/GHSA-hjp3-5g2q-7jww
• https://github.com/collectiveidea/audited/issues/601
• https://github.com/collectiveidea/audited/pull/669
• https://github.com/collectiveidea/audited/pull/671
• https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww

Check your stackJSON