← CVE Intelligence

CVE-2022-23766

BigFileAgent arbitrary file execution vulnerability PUBLISHED

Description (CNA)

An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.

Affected (CNA)

Vendor / productVersions
Bluetree Co., Ltd / BigFileAgentaffected unspecified through 1.0.1.9

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.