CVE-2022-42484 in FreshTomato信息

摘要

由 MITRE • 2023-01-30

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Talos

预定

2022-10-07

披露

2023-01-30

管理

已接受

条目

VDB-219754

CPE

准备好

CWE

CWE-78 (已确认)

CVSS

9.8 (NVD)

EPSS

0.06013

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-42484
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-42484
CVE Details	https://www.cvedetails.com/cve/CVE-2022-42484/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!