9.8
Critical
CVE-2022-41711 Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server
Description
Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Badaso | 2.6.0 | No fix stated |