Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88803
HistorySep 29, 2022 - 12:00 a.m.

Wazuh Code Execution Vulnerability

2022-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wazuh open source
code execution
vulnerability
active response
arbitrary code
cnvd

0.003 Low

EPSS

Percentile

66.2%

Wazuh is an (Wazuh) open source application. Wazuh 3.6.1 and later, 3.13.5 and earlier, 4.0.0 and later, 4.2.7 and earlier, and 4.3.0 and later, 4.3.7 and earlier are vulnerable to a code execution vulnerability that stems from Active Response endpoint fails to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to execute arbitrary code.

0.003 Low

EPSS

Percentile

66.2%

Related for CNVD-2022-88803