CVE-2022-28995

2022-05-2019:15:08

Google

osv.dev

8.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.

CPENameOperatorVersion
rengineeq1.0
rengineeq0.1
rengineeq0.5
rengineeq0.3
rengineeq1.0.1
rengineeq0.2
rengineeq1.0.2

Name	Operator	Version
rengine	eq	1.0
rengine	eq	0.1
rengine	eq	0.5
rengine	eq	0.3
rengine	eq	1.0.1
rengine	eq	0.2
rengine	eq	1.0.2

References

github.com/zongdeiqianxing/rengine/issues/1