CVE-2022-47876

The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

7.05% chance of exploitation in the next 30 days, 94th percentile

Published

2023-05-02

Updated

2025-01-30

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/172155/Jedox-2020.2.5-Groovy-Scripts-Remote-Code-Exe…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51427

References

• CVE Record
• NVD entry

Related

• CVE-2022-47875
• CVE-2022-47877
• CVE-2022-47874
• CVE-2022-47878
• CVE-2022-47872
• CVE-2022-47879