CVE-2022-28711
Assigner: talos
Published: 2022-04-14T00:00:00
State: PUBLISHED
affected: product: APWeb
vendor: ArduPilot
versions: status: affected
version: master commit 50b6b7ac - master commit 46177cb9
datePublic: 2022-04-14T00:00:00
descriptions: value: A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-20
description: CWE-20: Improper Input Validation
type: CWE