Lucene search

VulDBCVE-2022-4282

HistoryDec 05, 2022 - 10:15 a.m.

CVE-2022-4282

2022-12-0510:15:10

CWE-707

VulDB

web.nvd.nist.gov

cve-2022-4282

springbootcms

template management

remote injection

vdb-214790

vulnerability

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

41.2%

JSON

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214790 is the identifier assigned to this vulnerability.

Affected configurations

Nvd

Node

jrecmsspringbootcmsMatch-

VendorProductVersionCPE
jrecmsspringbootcms-cpe:2.3:a:jrecms:springbootcms:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jrecms	springbootcms	-	cpe:2.3:a:jrecms:springbootcms:-:::::::*

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "SpringBootCMS",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/Ha0Liu/cveAdd/blob/developer/JreCMS%20template%20injection%20vulnerability/JreCMS%20template%20injection%20vulnerability.md

vuldb.com/?id.214790

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

41.2%

JSON

Related for CVE-2022-4282