Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/11/25 12:0 a.m.40 views

CVE-2022-41958 Deserialization Vulnerability by yaml config input in super-xray

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

7.3CVSS7.6AI score0.00426EPSS
SaveExploits1References2
Rows per page
Query Builder