CVE-2022-44262

CRITICAL LAB

ff4j 1.8.1 - RCE

Title source: llm

Description

ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).

Exploits (2)

nomisec WORKING POC
by shoucheng3 · poc
https://github.com/shoucheng3/ff4j__ff4j_CVE-2022-44262_1_8_13_fixed
nomisec STUB
by shoucheng3 · poc
https://github.com/shoucheng3/ff4j__ff4j_CVE-2022-44262_1-8-13

References (1)

Scores

CVSS v3 9.8
EPSS 0.0121
EPSS Percentile 79.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Lab Environment

COMMUNITY
Community Lab
docker pull cassandra:3.11.7
docker pull docker.elastic.co/elasticsearch/elasticsearch:7.6.2
docker pull docker.elastic.co/kibana/kibana:7.6.2

Details

CWE
CWE-94
Status published
Products (2)
ff4j/ff4j 1.8.1
org.ff4j/ff4j-core 1.8.1 - 1.9Maven
Published Dec 01, 2022
Tracked Since Feb 18, 2026