Security Advisory

CVE-2022-42002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-30 23:53:19

Last updated 2024-08-03 12:56:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.

← Browse all CVEs View on cve.org ↗