CVE-2022-26174

Опубликовано: 21 мар. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.

Ссылки

https://github.com/beekeeper-studio/beekeeper-studio/issues/1051
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/beekeeper-studio/beekeeper-studio/issues/1051
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:beekeeperstudio:beekeeper-studio:*:*:*:*:*:*:*:*

Версия до 3.7.10 (исключая)

EPSS

Процентиль: 84%

0.02228

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-116

Связанные уязвимости

GHSA-fvmg-rxw4-v65c