Lucene search

CVE-2022-46478

🗓️ 13 Jan 2023 01:10:15Reported by [email protected]Type

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks, enabling arbitrary command execution via crafted Hessian serialized data

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2022-46478	13 Jan 202300:00	–	cvelist
CVE	CVE-2022-46478	13 Jan 202301:15	–	cve
OSV	CVE-2022-46478	13 Jan 202301:15	–	osv
Prion	Design/Logic Flaw	13 Jan 202301:15	–	prion

Nvd

Node

datax-web_project datax-webRange1.0.0–2.1.2

Source	Link
github	www.github.com/WeiYe-Jing/datax-web/issues/587

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jan 2023 01:15Current

9.8High risk

Vulners AI Score9.8

CVSS39.8

EPSS0.00292

CWE-502