CVE-2023-29492

2023-04-1100:00:00

mitre

github.com

novi survey

remote code execution

vulnerability

AI Score

7.7

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:novisurvey:novi_survey:*:*:*:*:*:*:*:*"
    ],
    "vendor": "novisurvey",
    "product": "novi_survey",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.9.43676",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]