3 matches found
CVE-2022-28888
Spryker Commerce OS 1.4.2 allows Remote Command Execution...
9.8CVSS7.1AI score0.04493EPSS
SaveExploits5References1
CVE-2022-28888
Spryker Commerce OS 1.4.2 allows Remote Command Execution...
9.8CVSS0.04493EPSS
SaveExploits5References6
CVE-2022-28888
CVE-2022-28888 affects Spryker Commerce OS 1.4.2 and specifically the spryker/http module versions below 1.7.0. The root cause is described as a predictable value used to sign/verify special _fragment URLs, enabling an attacker to cause remote command execution in many setups. Advisories state th...
9.8CVSS9.6AI score0.04493EPSS
SaveExploits5References6Affected Software1
20