exploitDog

CVE-2022-38545

Опубликовано: 19 сент. 2022

Источник: nvd

CVSS3: 9.6

EPSS Низкий

Описание

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

Ссылки

https://github.com/xCss/Valine/issues/400
Exploit
Issue Tracking
Third Party Advisory
https://github.com/xCss/Valine/issues/400
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:valine.js:valine:1.4.18:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01647

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-mcvg-g9wx-v5vx

CVSS3: 9.6

github

больше 3 лет назад

Valine code injection vulnerability

EPSS

Процентиль: 82%

0.01647

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79