Lucene search
MitreCVELIST:CVE-2022-40472HistorySep 29, 2022 - 7:02 p.m.
CVE-2022-40472
2022-09-2919:02:07
mitre
www.cve.org
2
zkteco
xiamen
zkbio time
8.0.7
csv injection
content text field
add new message
EPSS
0.001
Percentile
46.8%
ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.
Related
cnvd
cnvd
ZKTeco ZKBio Time Cross-Site Scripting Vulnerability
2022-10-08 00:00:00
nvd
nvd
CVE-2022-40472
2022-09-29 20:15:14
prion
prion
Design/Logic Flaw
2022-09-29 20:15:00
cve
cve
CVE-2022-40472
2022-09-29 20:15:14