packetstormsecurity.com
http://packetstormsecurity.com/files/172152/Jedox-2022.4.2-Directory-Traversal-Remote-Code-Execution.html CVE-2022-47875
HIGH
Jedox 2022.4.2 - Remote Code Execution via Directory Traversal
Record summary
CVE-2022-47875 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 30, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBJedox 2022.4.2 - Remote Code Execution via Directory TraversalExploitDB exploitby Team SysliftersNot analyzed1 file
References
3docs.syslifters.com
https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-47875