CVE-2022-34774: Tabit

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).

Affected products

• Tabit Tabit: before 3.27.0 (fixed in 3.27.0)

Published 2022-08-22. Last modified 2026-06-17.