Lucene search
GitHub_MCVELIST:CVE-2022-41945HistoryNov 21, 2022 - 12:00 a.m.
CVE-2022-41945 Remote Code Execution (RCE) vulnerability in super-xray via URL input
2022-11-2100:00:00
CWE-94
GitHub_M
www.cve.org
4
cve-2022-41945
remote code execution
super-xray
url input
upgrade.
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.003
Percentile
69.7%
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.
CNA Affected
[
{
"vendor": "4ra1n",
"product": "super-xray",
"versions": [
{
"version": "< 0.2-beta",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2022-41945
2022-11-21 23:15:10
prion
prion
Spoofing
2022-11-21 23:15:00
nvd
nvd
CVE-2022-41945
2022-11-21 23:15:10
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.003
Percentile
69.7%
Related for CVELIST:CVE-2022-41945