Is CVE-2022-34775 actively exploited?

No active exploitation of CVE-2022-34775 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-34775 be exploited remotely?

Yes. CVE-2022-34775 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-34775?

CVE-2022-34775 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-34775

HIGH

CVE-2022-34775

CWE-639Published: August 22, 2022· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, and organization. This can be used to query the http://tgm-api.tabit.cloud/rsv/management/{reservationId}?organization={orgId} API which returns a lot of data regarding the reservation (OWASP: API3): Name, mail, phone number, the number of visits of the user to this specific restaurant, the money he spent there, the money he spent on alcohol, whether he left a deposit etc. This information can easily be used for a phishing attack.

NVD Source

Technical Analysis

CVE-2022-34775 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.