Paper/Archive/CVE-2022-2714

CVE-2022-2714

francoisjacquet francoisjacquet/rosariosis — Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

41

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.3.593 × 2011.9 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.

Affected

ProductAffectedFixed inSource

francoisjacquet/rosariosisunspecified – < 10.010.0CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

@huntrdev (CNA)8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

refhuntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95 refgithub.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3