CVE-2022-45172

CVE-2022-45172 is a critical Broken Access Control vulnerability affecting LIVEBOX Collaboration vDesk before v018. This flaw allows unauthenticated attackers to exploit authorization logic in specific API endpoints to achieve privilege escalation to an administrator role and compromise user accounts. With a CVSS score of 9.8 (Critical), this vulnerability poses a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV entry, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.