CVE-2022-2765

CVE-2022-2765 is a critical improper authentication vulnerability affecting SourceCodester Company Website CMS 1.0, specifically within an unknown functionality of the /dashboard/settings file. This flaw allows for remote exploitation without requiring user interaction or prior authentication, leading to complete compromise of confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, Metasploit modules, or significant community discussion, suggesting it may not be widely targeted at present. Organizations using the affected CMS should prioritize patching to mitigate the high risk posed by this vulnerability.