CVE-2022-45771

HIGH 8.8EPSS 1.8%

An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.75% chance of exploitation in the next 30 days, 76th percentile
Published: 2022-12-05
Updated: 2025-04-24

Proof-of-concept exploits (3)

pwndoc/pwndoc/issues/401
p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE47★ · 2025-01-31
yuriisanin/CVE-2022-457716★ · 2023-02-11

References

Related