Lucene search

K
cvelistVulDBCVELIST:CVE-2022-4282
HistoryDec 05, 2022 - 12:00 a.m.

CVE-2022-4282 SpringBootCMS Template Management injection

2022-12-0500:00:00
CWE-707
VulDB
www.cve.org
3
springbootcms
template management
injection
remote attack
vdb-214790

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

41.2%

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214790 is the identifier assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "SpringBootCMS",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

41.2%

Related for CVELIST:CVE-2022-4282