CVE-2022-41711

n/a / Badaso PUBLISHED

Description (CNA)

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

Affected (CNA)

Vendor / product	Versions
n/a / Badaso	affected 2.6.0

CWE

No CWE identifiers supplied.

References

https://fluidattacks.com/advisories/harlow/
https://github.com/uasoft-indonesia/badaso/issues/802

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/harlow/
https://github.com/uasoft-indonesia/badaso/issues/802

CISA-ADP

No English description supplied.

No references supplied.