CVE-2022-22909

HIGH 8.8EPSS 45.4%

HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 45.43% chance of exploitation in the next 30 days, 99th percentile
Published: 2022-03-02
Updated: 2024-08-03

Proof-of-concept exploits (2)

0z09e/CVE-2022-229095★ · 2022-10-31
kaal18/CVE-2022-229092★ · 2022-03-14

ExploitDB entries (1)

https://www.exploit-db.com/exploits/50754

References

Related