CVE-2022-30981 in Gentics

Сводка

по MITRE • 18.07.2022

An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 18.05.2022
• Раскрытие: 18.07.2022
• Модерация: принято
• Вход: VDB-204042
• CPE: готов
• CWE: CWE-502 (Подтверждённый)
• CVSS: 8.8 (NVD)
• EPSS: 0.01279
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Agriculture, Lawfirm, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-30981
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-30981
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-30981/