by Kastro
Paper/Archive/CVE-2022-41875

CVE-2022-41875

airbnb optica — Remote Code Execution in Optica

EPSS 2%CVSS 10.0
critical.is priorityof 100
46
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 78.2.782 × 2015.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked system running Optica. The vulnerability was patched in v. 0.10.2, where the call to the function `oj.load` was changed to `oj.safe_load`.

Affected

ProductAffectedFixed inSource
optica< 0.10.2–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/airbnb/optica/security/advisories/GHSA-cf87-4h6x-phh6refgithub.com/ohler55/oj/blob/develop/pages/Security.mdrefrubydoc.info/gems/oj/3.0.2/Oj.safe_load