CVE-2022-30981 in Gentics

الملخص

بحسب MITRE • 18/07/2022

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 18/05/2022
• إفشاء: 18/07/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-204042
• CPE: جاهز
• CWE: CWE-502 (مؤكد)
• CVSS: 8.8 (NVD)
• EPSS: 0.01279
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Agriculture, Hostingprovider, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-30981
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-30981
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-30981/