CVE-2022-38545

Critical

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a…

mitre·CWE-79·Published 2022-09-19

CVSS

9.6

EPSS

0.33

KEV

Exploits

cve.orgen

161 chars

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

NVDen

161 chars

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

OSV.deven

153 chars

Valine was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

GHSAen

153 chars

Valine was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

NVDes

198 chars

Se ha detectado que Valine versión v1.4.18, contiene una vulnerabilidad de ejecución de código remota (RCE) que permite a atacantes ejecutar código arbitrario por medio de una petición POST diseñada

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.6	2.8	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Secondary	GHSA	9.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H