CVE-2022-0848

OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.

Score

CVSS 3.0 10.0 Critical

Status

Modified - security@huntr.dev

Published

2022-03-04

Last modified

2024-08-02

Weaknesses

CWE-78

Affected products

• Part-dbpart-db (Part-db)
• Part-db (Part-db Project)

References

• http://packetstormsecurity.com/files/166217/part-db-0.5.11-Remote-Code-Execution.html
• https://github.com/part-db/part-db/commit/9cd4eee393028aa4cab70fcbac284b0028c0bc95
• https://huntr.dev/bounties/3e91685f-cfb9-4ee4-abaf-9b712a8fd5a6