Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-47924

Arbitrary Code Execution using the validate function of csaf-validator-lib

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Secvisogram csaf-validator-lib

Default version status: unaffected

  • 0.0.0 to < 0.1.0affected

References