Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2022-11-25T00:00:00

Updated: 2024-08-03T12:49:43.916Z

Reserved: 2022-09-28T00:00:00

Link: CVE-2022-41705

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-11-25T18:15:10.980

Modified: 2024-11-21T07:23:41.350

Link: CVE-2022-41705

cve-icon Redhat

No data.