← Vulnerability feed

Vulnerability record · CVE-2022-26159 · published 28 February 2022

CVE-2022-26159: Ametys vulnerability

Ametys · Ametys

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.

5.3 CVSS 3.1 Medium EPSS 13% · top 3.7% CWE-425 · CWE-425
5.3CVSS 3.1 base score, v2 5.0
13%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/ ExploitThird Party Advisory
https://issues.ametys.org/browse/CMS-10973 Issue TrackingVendor Advisory
https://podalirius.net/en/cves/2022-26159/ ExploitThird Party Advisory
https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/ ExploitThird Party Advisory
https://issues.ametys.org/browse/CMS-10973 Issue TrackingVendor Advisory
https://podalirius.net/en/cves/2022-26159/ ExploitThird Party Advisory

Track CVE-2022-26159 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-16935Ametys improper input validation vulnerabilityAmetys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restr…EPSS 7.7%5.3CVE-2024-30614Ametys error message information leak vulnerabilityAn issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope.EPSS 0.48%5.1CVE-2022-50937Ametys cross-site scripting vulnerabilityAmetys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inj…EPSS 0.31%7.5CVE-2024-45195Apache OFBiz forced browsing exposes restricted endpointsApache OFBiz before 18.12.16 is affected by a direct request (forced browsing) flaw, CWE-425, that lets a remote unauthenticated client reach functio…KEVEPSS 100%analysed5.3CVE-2021-26085Atlassian Confluence Server pre-auth arbitrary file read via /s/ endpointConfluence Server and Data Center expose a pre-authorization arbitrary file read through the /s/ endpoint, letting unauthenticated remote attackers v…KEVEPSS 100%analysed

Source: NIST National Vulnerability Database (record CVE-2022-26159), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.