Beveiligingsadvies

CVE-2022-42002

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-09-30 23:53:19

Laatst bijgewerkt 2024-08-03 12:56:39

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.

← Alle CVE's bekijken Bekijk op cve.org ↗