Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41958
HistoryNov 25, 2022 - 6:15 p.m.

Design/Logic Flaw

2022-11-2518:15:00
PRIOn knowledge base
www.prio-n.com
vulnerability scanning tool
web
local access

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be included in future releases. Users are advised to upgrade. There are no known workarounds for this issue.

CPENameOperatorVersion
super_xraylt0.7

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2022-41958