Lucene search

K
nvd[email protected]NVD:CVE-2022-4282
HistoryDec 05, 2022 - 10:15 a.m.

CVE-2022-4282

2022-12-0510:15:10
CWE-707
web.nvd.nist.gov
2
springbootcms
template management
injection
remote attack
vdb-214790

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214790 is the identifier assigned to this vulnerability.

Affected configurations

Nvd
Node
jrecmsspringbootcmsMatch-
VendorProductVersionCPE
jrecmsspringbootcms-cpe:2.3:a:jrecms:springbootcms:-:*:*:*:*:*:*:*

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

Related for NVD:CVE-2022-4282