diff --git a/website/docs/releases/v2022.10.md b/website/docs/releases/v2022.10.md index 252b6bf22..0af5c6498 100644 --- a/website/docs/releases/v2022.10.md +++ b/website/docs/releases/v2022.10.md @@ -3804,7 +3804,7 @@ Changed response : **200 OK** ## Fixed in 2022.10.2 -- \*: fix CVE-2022-46145 +- \*: fix [CVE-2022-46145](../security/CVE-2022-46145), Reported by [@sdimovv](https://github.com/sdimovv) ## Fixed in 2022.10.3 @@ -3812,8 +3812,8 @@ Changed response : **200 OK** ## Fixed in 2022.10.4 -- \*: fix CVE-2022-46172 -- \*: fix CVE-2022-23555 +- \*: fix [CVE-2022-46172](../security/CVE-2022-46172), Reported by [@DreamingRaven](https://github.com/DreamingRaven) +- \*: fix [CVE-2022-23555](../security/CVE-2022-23555), Reported by [@fuomag9](https://github.com/fuomag9) ## Upgrading diff --git a/website/docs/releases/v2022.11.md b/website/docs/releases/v2022.11.md index 07cdddf2e..acb64210b 100644 --- a/website/docs/releases/v2022.11.md +++ b/website/docs/releases/v2022.11.md @@ -73,7 +73,7 @@ image: ## Fixed in 2022.11.2 -- \*: fix CVE-2022-46145 +- \*: fix [CVE-2022-46145](../security/CVE-2022-46145), Reported by [@sdimovv](https://github.com/sdimovv) ## Fixed in 2022.11.3 @@ -81,8 +81,8 @@ image: ## Fixed in 2022.11.4 -- \*: fix CVE-2022-46172 -- \*: fix CVE-2022-23555 +- \*: fix [CVE-2022-46172](../security/CVE-2022-46172), Reported by [@DreamingRaven](https://github.com/DreamingRaven) +- \*: fix [CVE-2022-23555](../security/CVE-2022-23555), Reported by [@fuomag9](https://github.com/fuomag9) ## API Changes diff --git a/website/docs/security/CVE-2022-23555.md b/website/docs/security/CVE-2022-23555.md index 0c922ac05..1dee7e57e 100644 --- a/website/docs/security/CVE-2022-23555.md +++ b/website/docs/security/CVE-2022-23555.md @@ -1,5 +1,7 @@ # CVE-2022-23555 +_Reported by [@fuomag9](https://github.com/fuomag9)_ + ## Token reuse in invitation URLs leads to access control bypass via the use of a different enrollment flow ### Summary diff --git a/website/docs/security/CVE-2022-46145.md b/website/docs/security/CVE-2022-46145.md index 11009aee1..75f4ebfad 100644 --- a/website/docs/security/CVE-2022-46145.md +++ b/website/docs/security/CVE-2022-46145.md @@ -1,5 +1,7 @@ # CVE-2022-46145 +_Reported by [@sdimovv](https://github.com/sdimovv)_ + ## Unauthorized user creation and potential account takeover ### Impact diff --git a/website/docs/security/CVE-2022-46172.md b/website/docs/security/CVE-2022-46172.md index e44c298af..6c31f3e1d 100644 --- a/website/docs/security/CVE-2022-46172.md +++ b/website/docs/security/CVE-2022-46172.md @@ -1,5 +1,7 @@ # CVE-2022-46172 +_Reported by [@DreamingRaven](https://github.com/DreamingRaven)_ + ## Existing Authenticated Users can Create Arbitrary Accounts ### Summary