Code injection

2023-03-0605:15:00

PRIOn knowledge base

www.prio-n.com

kioware

code injection

windows

javascript

system access

vulnerability

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code.

CPENameOperatorVersion
kiowarele8.33

CPE	Name	Operator	Version
	kioware	le	8.33

References

github.com/olnor18/writeup/tree/master/CVE/CVE-2022-44875

www.kioware.com/versionhistory.aspx?pid=15