CVE-2022-34267

2023-12-2500:00:00

mitre

www.cve.org

rws worldserver

authentication bypass

token parameter

java code execution

.jar archive

ws-api/v2/customizations/api

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.