rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-25217 
Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shell on the device over telnet. The builds of telnetd_startup included in the version 22.5.9.163 of the K2 firmware, and version 32.1.15.93 of the K3C firmware (possibly amongst many other releases) included both the private and public RSA keys. The remaining versions cited here redacted the private key, but left the public key unchanged. An attacker in possession of the leaked private key may, through a scripted exchange of UDP packets, instruct telnetd_startup to spawn an unauthenticated telnet shell as root, by means of which they can then obtain complete control of the device. A consequence of the limited availablility of firmware images for testing is that models and versions not listed here may share this vulnerability.
Problem types: description: Use of a hard-coded cryptographic key
Affected products: vendor: n/a
product: Phicomm Routers
Published: 2022-03-07T21:49:05.000Z
CVE-2022-25218 
The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).
Problem types: description: Use of RSA Algorithm without OAEP
Affected products: vendor: n/a
product: Phicomm Routers
Published: 2022-03-07T21:50:25.000Z
CVE-2022-25219 
A null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair of ephemeral passwords that allow a user to spawn a telnet service on the router, and to ensure that the telnet service persists upon reboot. By means of a crafted exchange of UDP packets, an unauthenticated attacker on the local network can leverage this null byte interaction error in such a way as to make those ephemeral passwords predictable (with 1-in-94 odds). Since the attacker must manipulate data processed by the OpenSSL function RSA_public_decrypt(), successful exploitation of this vulnerability depends on the use of an unpadded RSA cipher (CVE-2022-25218).
Problem types: description: Null Byte Interaction Error
Affected products: vendor: n/a
product: Phicomm Routers
Published: 2022-03-07T21:56:51.000Z
CVE-2022-25220 
PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.
Problem types: description: Stored cross-site scripting (XSS)
Affected products: vendor: n/a
product: PeTeReport
Published: 2022-03-03T21:57:46.000Z
CVE-2022-25221 
Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the link in order to execute JavaScript code.
Problem types: description: DOM-Based Cross-Site Scripting (XSS)
Affected products: vendor: n/a
product: Money Transfer Management System
Published: 2022-03-23T19:46:11.000Z
CVE-2022-25222 
Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage_branch.php' and 'admin/maintenance/manage_fee.php' via the 'id' parameter.
Problem types: description: SQL injection
Affected products: vendor: n/a
product: Money Transfer Management System
Published: 2022-03-23T19:46:12.000Z
CVE-2022-25223 
Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_details' via the 'id' parameter.
Problem types: description: SQL injection
Affected products: vendor: n/a
product: Money Transfer Management System
Published: 2022-03-23T19:46:13.000Z
CVE-2022-25224 
Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration' configuration is set to on which allows the 'webpage' to use 'NodeJs' features, an attacker can leverage this to run OS commands.
Problem types: description: XSS to RCE
Affected products: vendor: n/a
product: Proton
Published: 2022-05-20T11:04:12.000Z
CVE-2022-25225 
Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation (PostgreSQL) by exploiting this issue.
Problem types: description: Remote code execution (RCE)
Affected products: vendor: n/a
product: Network Olympus
Published: 2022-03-08T14:19:27.000Z
CVE-2022-25226 
ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.
Problem types: description: Authentication Bypass
Affected products: vendor: n/a
product: ThinVNC
Published: 2022-04-18T16:20:44.000Z
CVE-2022-25227 
Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE.
Problem types: description: CORS Misconfiguration
Affected products: vendor: n/a
product: Thinfinity VNC
Published: 2022-05-20T11:02:49.000Z
CVE-2022-25228 
CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in '/index.php?m=candidates&a=show' via the 'candidateID', in '/index.php?m=joborders&a=show' via the 'jobOrderID' and '/index.php?m=companies&a=show' via the 'companyID' parameter
Problem types: description: SQL injection
Affected products: vendor: n/a
product: CandidATS
Published: 2022-08-18T19:29:36.000Z
CVE-2022-25229 
Popcorn Time 0.4.7 has a Stored XSS in the 'Movies API Server(s)' field via the 'settings' page. The 'nodeIntegration' configuration is set to on which allows the 'webpage' to use 'NodeJs' features, an attacker can leverage this to run OS commands.
Problem types: description: XSS to RCE
Affected products: vendor: n/a
product: Popcorn Time
Published: 2022-05-20T11:01:18.000Z
CVE-2022-25230 
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325.
Problem types: description: Use after free
Affected products: vendor: OMRON Corporation
product: CX-Programmer
Published: 2022-03-07T09:00:40.000Z
CVE-2022-25231 Denial of Service (DoS)
The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.
Problem types: description: Denial of Service (DoS)
Affected products: vendor: n/a
product: node-opcua
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
exploitCodeMaturity: PROOF_OF_CONCEPT
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 7.1
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
version: 3.1
Credits: lang: en
value: Vera Mens
lang: en
value: Uri Katz
lang: en
value: Sharon Brizinov of Team82 (Claroty Research)
Published: 2022-08-23T05:05:45.808Z
CVE-2022-25234 
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-21124.
Problem types: description: Out-of-bounds write
Affected products: vendor: OMRON Corporation
product: CX-Programmer
Published: 2022-03-07T09:00:41.000Z
CVE-2022-25235 
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T00:40:20.000Z
CVE-2022-25236 
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T00:39:16.000Z
CVE-2022-25237 
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API endpoints. This can lead to remote code execution by abusing the privileged API actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T16:48:43.000Z
CVE-2022-25238 
Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T21:39:48.000Z
CVE-2022-25241 
In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T01:26:06.000Z
CVE-2022-25242 
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T01:25:53.000Z
CVE-2022-25243 
"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under certain configurations to issue wildcard certificates to authorized users for a specified domain, even if the PKI role policy attribute allow_subdomains is set to false. Fixed in Vault Enterprise 1.8.9 and 1.9.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-07T21:45:16.000Z
CVE-2022-25244 
Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-07T21:41:52.000Z
CVE-2022-25245 
Zoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default currency name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T18:27:38.000Z
CVE-2022-25246 PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:31.142Z
CVE-2022-25247 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to obtain full file-system access and remote code execution.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:29.947Z
CVE-2022-25248 PTC Axeda agent and Axeda Desktop Server Information Exposure
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:32.150Z
CVE-2022-25249 PTC Axeda agent and Axeda Desktop Server Path Traversal
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:33.369Z
CVE-2022-25250 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:34.493Z
CVE-2022-25251 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:36.591Z
CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to crash the affected product.
Problem types: cwe_id: CWE-703
description: CWE-703 Improper Check or Handling of Exceptional Conditions
Affected products: vendor: PTC
product: Axeda agent
vendor: PTC
product: Axeda Desktop Server for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Yuval Shoshani and Elad Luz of CyberMDX and Vedere Labs reported these vulnerabilities to PTC
Published: 2022-03-16T14:03:35.553Z
CVE-2022-25255 
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T18:48:35.000Z
CVE-2022-25256 
SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_request_backurl_list. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing the button, e.g., a malicious web page. In addition, the second parameter executes JavaScript, which means XSS is possible by adding a javascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-19T00:17:15.000Z
CVE-2022-25258 
An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T00:00:00.000Z
CVE-2022-25259 
JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T20:01:27.000Z
CVE-2022-25260 
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T20:01:18.000Z
CVE-2022-25261 
JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T19:59:36.000Z
CVE-2022-25262 
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T19:59:29.000Z
CVE-2022-25263 
JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T19:59:20.000Z
CVE-2022-25264 
In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T19:59:05.000Z
CVE-2022-25265 
In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-16T20:30:51.000Z
CVE-2022-25266 
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T22:06:54.000Z
CVE-2022-25267 
Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T22:06:24.000Z
CVE-2022-25268 
Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T22:06:32.000Z
CVE-2022-25269 
Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T22:06:43.000Z
CVE-2022-25270 
The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
Problem types: description: Information disclosure
Affected products: vendor: Drupal
product: Core
Published: 2022-02-16T23:15:11.000Z
CVE-2022-25271 
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Drupal
product: Core
Published: 2022-02-16T00:00:00.000Z