CVE-2022-1212

Опубликовано: 05 апр. 2022

Источник: nvd

CVSS3: 9.3

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

Ссылки

https://github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6
Patch
Third Party Advisory
https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6
Patch
Third Party Advisory
https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*

Версия до 3.0.0 (включая)

cpe:2.3:a:mruby:mruby:3.1.0:rc:*:*:*:*:*:*

cpe:2.3:a:mruby:mruby:3.1.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.0168

Низкий

9.3 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-1212

CVSS3: 9.8

ubuntu

больше 4 лет назад

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

CVE-2022-1212

msrc

12 месяцев назад

Use-After-Free in str_escape in mruby/mruby in mruby/mruby

CVE-2022-1212

CVSS3: 9.8

debian

больше 4 лет назад

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby ...

GHSA-xh66-6mj6-94rg

CVSS3: 9.8

github

больше 4 лет назад

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

EPSS

Процентиль: 75%

0.0168

Низкий

9.3 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416