CVE-2022-38935: Niter Niterforum

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.

Affected products

• Niter Niterforum: version 2.5.0 only

Published 2023-02-15. Last modified 2026-06-17.