9.8
Critique
CVE-2022-41705 Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server
Description
Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Badaso | 2.6.3 | Pas de correctif indiqué |