rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-27369 
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T17:31:10.000Z
CVE-2022-27373 
Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution (RCE) vulnerability via the Ping function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-19T17:39:03.000Z
CVE-2022-27374 
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T15:46:58.000Z
CVE-2022-27375 
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T15:46:49.000Z
CVE-2022-27376 
MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:17.000Z
CVE-2022-27377 
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:18.000Z
CVE-2022-27378 
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:19.000Z
CVE-2022-27379 
An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:19.000Z
CVE-2022-27380 
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:20.000Z
CVE-2022-27381 
An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:20.000Z
CVE-2022-27382 
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:21.000Z
CVE-2022-27383 
MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:21.000Z
CVE-2022-27384 
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:22.000Z
CVE-2022-27385 
An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:23.000Z
CVE-2022-27386 
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:24.000Z
CVE-2022-27387 
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:14:24.000Z
CVE-2022-27404 
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T00:00:00.000Z
CVE-2022-27405 
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T00:00:00.000Z
CVE-2022-27406 
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-22T00:00:00.000Z
CVE-2022-27411 
TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter in the "Main" function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T18:05:28.000Z
CVE-2022-27412 
Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T17:31:53.000Z
CVE-2022-27413 
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T20:24:12.000Z
CVE-2022-27416 
Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T00:00:00.000Z
CVE-2022-27418 
Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T00:00:00.000Z
CVE-2022-27419 
rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T19:52:12.000Z
CVE-2022-27420 
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T02:23:19.000Z
CVE-2022-27421 
Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T19:21:18.000Z
CVE-2022-27422 
A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web scripts or HTML via user interaction with a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T19:21:18.000Z
CVE-2022-27423 
Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T19:21:19.000Z
CVE-2022-27425 
Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T19:21:20.000Z
CVE-2022-27426 
A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T19:21:21.000Z
CVE-2022-27428 
A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the album_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:43:09.000Z
CVE-2022-27429 
Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:43:10.000Z
CVE-2022-27431 
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T02:26:01.000Z
CVE-2022-27432 
A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T23:24:46.000Z
CVE-2022-27434 
UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T23:29:37.000Z
CVE-2022-27435 
An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T13:17:59.000Z
CVE-2022-27436 
A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T13:17:59.000Z
CVE-2022-27438 
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:21:30.000Z
CVE-2022-27441 
A stored cross-site scripting (XSS) vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T21:01:04.000Z
CVE-2022-27442 
TPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information such as the administrator's user name and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-04T21:01:04.000Z
CVE-2022-27444 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:51.000Z
CVE-2022-27445 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:52.000Z
CVE-2022-27446 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:53.000Z
CVE-2022-27447 
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:53.000Z
CVE-2022-27448 
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:55.000Z
CVE-2022-27449 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:56:55.000Z
CVE-2022-27451 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:57:00.000Z
CVE-2022-27452 
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:57:00.000Z
CVE-2022-27455 
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:57:01.000Z
CVE-2022-27456 
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:57:02.000Z
CVE-2022-27457 
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T12:57:02.000Z
CVE-2022-27461 
In nopCommerce 4.50.1, an open redirect vulnerability can be triggered by luring a user to authenticate to a nopCommerce page by clicking on a crafted link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:04:08.000Z
CVE-2022-27462 
Cross Site Scripting (XSS) vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T15:37:22.000Z
CVE-2022-27463 
Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T15:37:46.000Z
CVE-2022-27466 
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:24:49.000Z
CVE-2022-27468 
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T13:43:14.000Z
CVE-2022-27469 
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T13:43:25.000Z
CVE-2022-27470 
SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T02:34:44.000Z
CVE-2022-27472 
SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:30:29.000Z
CVE-2022-27473 
SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:30:32.000Z
CVE-2022-27474 
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T12:55:32.000Z
CVE-2022-27475 
Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-13T11:39:02.000Z
CVE-2022-27476 
A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T21:01:37.000Z
CVE-2022-27477 
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T21:01:39.000Z
CVE-2022-27478 
Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:05:34.000Z
CVE-2022-27479 SQL injection vulnerability in chart data API
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Superset
Published: 2022-04-13T19:05:11.000Z
CVE-2022-27480 
A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.
Problem types: cwe_id: CWE-862
description: CWE-862: Missing Authorization
Affected products: vendor: Siemens
product: SICAM A8000 CP-8031
vendor: Siemens
product: SICAM A8000 CP-8050
Published: 2022-04-12T09:08:03.000Z
CVE-2022-27481 
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Siemens
product: SCALANCE W1788-1 M12
vendor: Siemens
product: SCALANCE W1788-2 EEC M12
vendor: Siemens
product: SCALANCE W1788-2 M12
vendor: Siemens
product: SCALANCE W1788-2IA M12
Published: 2022-04-12T09:08:04.000Z
CVE-2022-27482 
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiADC
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
Published: 2023-02-16T18:06:42.848Z
CVE-2022-27483 
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 through 6.4.7, 6.2.x and 6.0.x allows attacker to execute arbitrary shell code as `root` user via `diagnose system` CLI commands.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiManager, FortiAnalyzer
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: HIGH
privilegesRequired: HIGH
remediationLevel: UNAVAILABLE
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 6.8
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
version: 3.1
Published: 2022-07-18T16:40:20.000Z
CVE-2022-27484 
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
Problem types: description: Improper access control
Affected products: vendor: Fortinet
product: Fortinet FortiADC
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: UNAVAILABLE
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.1
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C
version: 3.1
Published: 2022-08-03T13:20:10.000Z
CVE-2022-27485 
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox version 4.2.0, 4.0.0 through 4.0.2, 3.2.0 through 3.2.3, 3.1.x and 3.0.x allows a remote and authenticated attacker with read permission to retrieve arbitrary files from the underlying Linux system via a crafted HTTP request.
Problem types: cwe_id: CWE-89
description: Information disclosure
Affected products: vendor: Fortinet
product: FortiSandbox
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
Published: 2023-04-11T16:07:08.880Z