Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-36038

Опубликовано: 06 сент. 2022
Источник: nvd
CVSS3: 8.8
CVSS3: 7.8
EPSS Низкий

Описание

CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code execution (RCE) vulnerability in CircuitVerse allows authenticated attackers to execute arbitrary code via specially crafted JSON payloads. This issue may lead to Remote Code Execution (RCE). A patch is available in commit number 7b3023a99499a7675f10f2c1d9effdf10c35fb6e. There are currently no known workarounds.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:circuitverse:circuitverse:-:*:*:*:*:*:*:*

EPSS

Процентиль: 80%
0.01471
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-502

EPSS

Процентиль: 80%
0.01471
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-502