CVE-2022-47924

CVE-2022-47924 affects Secvisogram (locally installed) through the csaf-validator-lib.validate function. Vulnerable are versions prior to 0.1.0 where crafted arguments can enable an attacker with high privileges to trigger arbitrary code execution and cause a Denial of Service when a user runs th...

CVE-2022-47925

The CVE-2022-47925 affects the Secvisogram csaf-validator-service prior to version 0.1.0. The Vulnerability is in the validate JSON endpoint where insufficient input validation allows an unauthenticated remote user to cause a partial DoS of the service by sending tests with unexpected names. Per ...