Lucene search

GoogleOSV:CVE-2022-31860

HistorySep 06, 2022 - 6:15 p.m.

CVE-2022-31860

2022-09-0618:15:15

Google

osv.dev

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.

CPENameOperatorVersion
openremoteeqcocoapod1.2.0
openremoteeqcocoapod1.1.0
openremoteeqcocoapod1.1.1
openremoteeqcocoapod1.1.2
openremoteeqcocoapod1.1.3
openremoteeqcocoapod1.1.4
openremoteeqcocoapod1.1.5
openremoteeqcocoapod1.1.6
openremoteeqcss_port
openremoteeqcocoapod1.0.3

Name	Operator	Version
openremote	eq	cocoapod1.2.0
openremote	eq	cocoapod1.1.0
openremote	eq	cocoapod1.1.1
openremote	eq	cocoapod1.1.2
openremote	eq	cocoapod1.1.3
openremote	eq	cocoapod1.1.4
openremote	eq	cocoapod1.1.5
openremote	eq	cocoapod1.1.6
openremote	eq	css_port
openremote	eq	cocoapod1.0.3

Rows per page:

1-10 of 151

References

github.com/openremote/openremote/

securityblog101.blogspot.com/2022/09/cve-2022-31860.html

stackoverflow.com/questions/159148/groovy-executing-shell-commands

stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

Related for OSV:CVE-2022-31860