CVE-2022-40238

 

Published at: - 26-10-2022 06:15

Last modified: - 26-10-2022 09:38

Total changes: - 1

Description

A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity

 

Keywords

NVD

 

CVE-2022-40238

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures