deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2514
Published: 2022-07-25
Description: The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/beancount/fava/commit/ca9e3882c7b5fbf5273ba52340b9fea6a99f3711; https://huntr.dev/bounties/dbf77139-4384-4dc5-9994-45a5e0747429; https://github.com/beancount/fava/commit/ca9e3882c7b5fbf5273ba52340b9fea6a99f3711
CVE: CVE-2022-2522
Published: 2022-07-25
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/5fa9f23a63651a8abdb074b4fc2ec9b1adc6b089; https://github.com/vim/vim/commit/b9e717367c[PII_REDACTED]95cf375911b5d9de889e; https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22
CVE: CVE-2022-2523
Published: 2022-07-25
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/beancount/fava/commit/dccfb6a2f4567f35ce2e9a78e24f92ebf946bc9b; https://huntr.dev/bounties/2a1802d8-1c2e-4919-96a7-d4dcf7ffcf8f; https://github.com/beancount/fava/commit/dccfb6a2f4567f35ce2e9a78e24f92ebf946bc9b
CVE: CVE-2021-40335
Published: 2022-07-25
Description: A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery (CSRF), which if exploited could lead an attacker to gain unauthorized access to the web application and perform an unwanted operation on it without the knowledge of the legitimate user. An attacker, who successfully makes an MSM user who has already established a session to MSM web interface clicks a forged link to the MSM web interface, e.g., link is sent per E-Mail, could perform harmful command on MSM through its web server interface. This issue affects: Hitachi Energy MSM V2.2 and prior versions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000085&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000085&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-40336
Published: 2022-07-25
Description: A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session cookies. Thus, an attacker who successfully makes an MSM user who has already established a session to MSM web interface clicks a forged link to the MSM web interface, e.g., the link is sent per E-Mail, could trick the user into downloading malicious software onto his computer. This issue affects: Hitachi Energy MSM V2.2 and prior versions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-113, CWE-74
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000085&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000085&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-26305
Published: 2022-07-25
Description: An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would present as belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html; https://www.libreoffice.org/about-us/security/advisories/cve-2022-26305; https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html
CVE: CVE-2022-26306
Published: 2022-07-25
Description: LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which weakens the security of the encryption making them vulnerable if an attacker has access to the user's configuration data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-330
References: http://www.openwall.com/lists/oss-security/2022/08/13/1; https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html; https://www.libreoffice.org/about-us/security/advisories/cve-2022-26306
CVE: CVE-2022-26307
Published: 2022-07-25
Description: LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulerable to a brute force attack if an attacker has access to the users stored config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-326
References: http://www.openwall.com/lists/oss-security/2022/08/13/2; https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html; https://www.libreoffice.org/about-us/security/advisories/cve-2022-26307
CVE: CVE-2022-2131
Published: 2022-07-25
Description: OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack.
CVSS Score: 8.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://www.incibe-cert.es/en/early-warning/security-advisories/openkm-xxe-injection; https://www.incibe-cert.es/en/early-warning/security-advisories/openkm-xxe-injection
CVE: CVE-2022-33965
Published: 2022-07-25
Description: Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-visitor-statistics-plugin-5-7-multiple-unauthenticated-sql-injection-sqli-vulnerabilities; https://wordpress.org/plugins/wp-stats-manager/#developers; https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-visitor-statistics-plugin-5-7-multiple-unauthenticated-sql-injection-sqli-vulnerabilities
CVE: CVE-2022-34961
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bypazs/CVE-2022-34961; https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/cve-2022-34961-ossn-6-3-lts-stored-xss-vulnerability-at-users-timeline-819a9d4e5e6c
CVE: CVE-2022-34963
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bypazs/CVE-2022-34963; https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/cve-2022-34963-ossn-6-3-lts-stored-xss-vulnerability-at-news-feed-b8ae8f2fa5f3
CVE: CVE-2022-34964
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/ossn-6-3-lts-stored-xss-vulnerability-at-sitepages-ba91bbeccf1c; https://www.opensource-socialnetwork.org/
CVE: CVE-2022-35649
Published: 2022-07-25
Description: The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-20
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75044; https://bugzilla.redhat.com/show_bug.cgi?id=2106273; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
CVE: CVE-2022-35650
Published: 2022-07-25
Description: The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-20
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-72029; https://bugzilla.redhat.com/show_bug.cgi?id=2106274; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
CVE: CVE-2022-35651
Published: 2022-07-25
Description: A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-71921; https://bugzilla.redhat.com/show_bug.cgi?id=2106275; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
CVE: CVE-2022-35652
Published: 2022-07-25
Description: An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. A remote attacker can create a link that leads to a trusted website, however, when clicked, it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-72171; https://bugzilla.redhat.com/show_bug.cgi?id=2106276; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
CVE: CVE-2022-35653
Published: 2022-07-25
Description: A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-72299; https://bugzilla.redhat.com/show_bug.cgi?id=2106277; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
CVE: CVE-2022-24083
Published: 2022-07-25
Description: Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://support.pega.com/support-doc/pega-security-advisory-c22-vulnerability-%E2%80%93-hotfix-matrix-0; https://support.pega.com/support-doc/pega-security-advisory-c22-vulnerability-%E2%80%93-hotfix-matrix-0
CVE: CVE-2022-34965
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/cve-2022-34965-open-source-social-network-6-3-3f61db82880; https://www.opensource-socialnetwork.org/
CVE: CVE-2022-24992
Published: 2022-07-25
Description: A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://qrcdr.com; https://codecanyon.net/item/qrcdr-responsive-qr-code-generator/9226839; https://n0lsec.medium.com/qrcdr-path-traversal-vulnerability-bb89acc0c100
CVE: CVE-2022-2032
Published: 2022-07-25
Description: In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/; https://www.incibe.es/en/cve-assignment-publication/coordinated-cves; https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE: CVE-2022-2059
Published: 2022-07-25
Description: In Pandora FMS v7.0NG.761 and below, in the agent creation section, the alias parameter is vulnerable to a Stored Cross Site-Scripting. This vulnerability can be exploited by an attacker with administrator privileges logged in the system.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/; https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE: CVE-2022-33969
Published: 2022-07-25
Description: Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/image-hover-effects-ultimate-visual-composer/wordpress-flipbox-plugin-2-6-0-authenticated-wordpress-options-change-vulnerability; https://plugins.trac.wordpress.org/changeset/2648808; https://patchstack.com/database/vulnerability/image-hover-effects-ultimate-visual-composer/wordpress-flipbox-plugin-2-6-0-authenticated-wordpress-options-change-vulnerability
CVE: CVE-2022-34962
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bypazs/CVE-2022-34962; https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034
CVE: CVE-2022-35284
Published: 2022-07-25
Description: IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.
CVSS Score: 7.5 (HIGH)
CWE: CWE-565
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230811; https://www.ibm.com/support/pages/node/6606663; https://exchange.xforce.ibmcloud.com/vulnerabilities/230811
CVE: CVE-2022-35285
Published: 2022-07-25
Description: IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230812.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230812; https://www.ibm.com/support/pages/node/6606819; https://exchange.xforce.ibmcloud.com/vulnerabilities/230812
CVE: CVE-2022-35287
Published: 2022-07-25
Description: IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 230817.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230817; https://www.ibm.com/support/pages/node/6606827; https://exchange.xforce.ibmcloud.com/vulnerabilities/230817
CVE: CVE-2022-35288
Published: 2022-07-25
Description: IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230818; https://www.ibm.com/support/pages/node/6606831; https://exchange.xforce.ibmcloud.com/vulnerabilities/230818
CVE: CVE-2022-22999
Published: 2022-07-25
Description: Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's browser. As a result, it may be possible to gain control over the authenticated session, steal data, modify settings, or redirect the user to malicious websites. The scope of impact can extend to other components.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114; https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114
CVE: CVE-2022-23000
Published: 2022-07-25
Description: The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead of "TLS" or specifying stronger validation, deprecated or insecure protocols are permitted. As a result, a local user with no privileges can exploit this vulnerability and jeopardize the integrity, confidentiality and authenticity of information transmitted. The scope of impact cannot extend to other components and no user input is required to exploit this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-757
References: https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114; https://www.westerndigital.com/support/product-security/wdc-22011-my-cloud-firmware-version-5-23-114
CVE: CVE-2022-34966
Published: 2022-07-25
Description: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ip_address/:port/ossn/home.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3; https://grimthereaperteam.medium.com/cve-2022-34966-ossn-6-3-lts-html-injection-vulnerability-at-location-parameter-3fe791dd22c6; https://www.opensource-socialnetwork.org/
CVE: CVE-2022-35869
Published: 2022-07-25
Description: This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b[PII_REDACTED]). Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The issue results from the lack of proper authentication prior to access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17211.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities; https://www.zerodayinitiative.com/advisories/ZDI-22-1016/; https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities
CVE: CVE-2022-35870
Published: 2022-07-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b[PII_REDACTED]). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveautomation.metro.impl. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17265.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities; https://www.zerodayinitiative.com/advisories/ZDI-22-1017/; https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities
CVE: CVE-2022-35871
Published: 2022-07-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b[PII_REDACTED]). Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The issue results from the lack of authentication prior to allowing the execution of python code. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17206.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities; https://www.zerodayinitiative.com/advisories/ZDI-22-1018/; https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities
CVE: CVE-2022-35872
Published: 2022-07-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b[PII_REDACTED]). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ZIP files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17115.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities; https://www.zerodayinitiative.com/advisories/ZDI-22-1019/; https://support.inductiveautomation.com/hc/en-us/articles/[PII_REDACTED]653-Regarding-Pwn2Own-2022-Vulnerabilities