Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:37786
HistoryNov 03, 2022 - 5:17 a.m.

Arbitrary Code Execution

2022-11-0305:17:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
37
fluentd
vulnerability
remote code execution
oj_options.rb
unauthenticated attackers
json payloads

0.024 Low

EPSS

Percentile

90.1%

JSON

fluentd is vulnerable to remote code execution. The vulnerability exists in due to oj_options.rb, where a non-default configuration allows unauthenticated attackers to execute arbitrary codes via specially crafted JSON payloads.

CPENameOperatorVersion
fluentdle1.15.2
fluentdle1.15.2

Related

nessus 2
nvd 1
github 1
prion 1
fedora 2
osv 3
openvas 2
cbl_mariner 1
cvelist 1
cve 1
redhatcve 1
nessus
nessus
CBL Mariner 2.0 Security Update: rubygem-fluentd (CVE-2022-39379)
2023-03-20 00:00:00
Fedora 37 : golang-github-docker / golang-github-graylog2-gelf (2023-6b9e2a6534)
2024-04-29 00:00:00
nvd
nvd
CVE-2022-39379
2022-11-02 13:15:13
github
github
fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
2022-11-02 18:15:35
prion
prion
Remote code execution
2022-11-02 13:15:00
fedora
fedora
[SECURITY] Fedora 37 Update: golang-github-graylog2-gelf-2.0.0-6.20201111git1550ee6.fc37
2023-01-11 01:22:48
[SECURITY] Fedora 37 Update: golang-github-docker-22.06.0~beta.0-7.fc37
2023-01-11 01:22:47
osv
osv
BIT-fluentd-2022-39379
2024-03-06 10:51:50
CVE-2022-39379
2022-11-02 13:15:13
fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
2022-11-02 18:15:35
openvas
openvas
Fedora: Security Advisory for golang-github-graylog2-gelf (FEDORA-2023-6b9e2a6534)
2023-01-11 00:00:00
Fedora: Security Advisory for golang-github-docker (FEDORA-2023-6b9e2a6534)
2023-01-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-39379 affecting package rubygem-fluentd for versions less than 1.14.6-2
2022-11-16 02:26:11
cvelist
cvelist
CVE-2022-39379 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
2022-11-02 00:00:00
cve
cve
CVE-2022-39379
2022-11-02 13:15:13
redhatcve
redhatcve
CVE-2022-39379
2022-11-14 05:26:21

0.024 Low

EPSS

Percentile

90.1%

JSON
Related for VERACODE:37786
nessus2nvd1github1prion1fedora2osv3openvas2cbl_mariner1cvelist1cve1redhatcve1