Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-48582
HistoryAug 09, 2023 - 6:15 p.m.

Command injection

2023-08-0918:15:00
PRIOn knowledge base
www.prio-n.com
2
command injection
ticket report
sciencelogic sl1
vulnerability
user input
shell command

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.

CPENameOperatorVersion
sl1le11.1.2

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

Related for PRION:CVE-2022-48582