Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-42002
HistoryOct 01, 2022 - 12:15 a.m.

Authentication flaw

2022-10-0100:15:00
PRIOn knowledge base
www.prio-n.com
6
sonicjs
file overwrite
authentication flaw
arbitrary file write
delete

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.

CPENameOperatorVersion
sonicjsle0.6.0

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

Related for PRION:CVE-2022-42002