Lucene search
+L

48 matches found

Mend
Mend
•added 2023/01/13 12:00 a.m.•4 views

CVE-2022-46478

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data...

9.8CVSS0.01091EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/13 12:00 a.m.•46 views

CVE-2022-46478

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data...

10AI score0.01091EPSS
SaveExploits1References1
OSV
OSV
•added 2023/01/13 12:00 a.m.•27 views

CVE-2022-46478

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data...

9.8CVSS7.7AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•18 views

DataX-Web 代码问题漏洞

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developers. A security vulnerability exists in DataX-Web v1.0.0 and v2.0.0 to v2.1.2, which stems from the fact that its RPC interface does not perform privilege checking by default, allowing an...

9.8CVSS8.8AI score0.01091EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/01/13 12:00 a.m.•27 views

PT-2023-14939 · Datax-Web · Datax-Web

Name of the Vulnerable Software and Affected Versions: datax-web versions 1.0.0 through 2.1.2 Description: The issue concerns the RPC interface in datax-web, which lacks permission checks by default. This allows attackers to execute arbitrary commands by sending crafted Hessian serialized data...

9.8CVSS9.8AI score0.01091EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/01/13 12:00 a.m.•9 views

CVE-2022-46478

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data...

9.8AI score0.01091EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•7 views

CVE-2022-46478: Deserialization of Untrusted Data

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data...

9.8CVSS6.3AI score0.01091EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/13 12:00 a.m.•81 views

CVE-2022-46478

The CVE-2022-46478 issue affects datax-web v1.0.0 and v2.0.0 through v2.1.2. The RPC interface does not perform default permission checks, enabling an attacker to execute arbitrary commands by sending crafted Hessian-serialized data. Impact is described as remote command execution over the networ...

9.8CVSS9.6AI score0.01091EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder