CVE-2022-28802

Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unintentionally granted full access to all users of a company's...

CVE-2022-28802

creationtimestamp| type| source ---|---|--- 2022-09-22 00:46:18+00:00| seen| https://t.me/cibsecurity/50244...

CVE-2022-28802

Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unintentionally granted full access to all users of a company's...

CVE-2022-28802

CVE-2022-28802 affects Zapier’s Code by Zapier prior to 2022-08-17. The vulnerability allowed intra-account privilege escalation via a customer-controlled general‑purpose virtual machine that could execute Python or JavaScript code, effectively granting access across all users within a company’s ...