packetstormsecurity.com
http://packetstormsecurity.com/files/172155/Jedox-2020.2.5-Groovy-Scripts-Remote-Code-Execution.html CVE-2022-47876
CRITICAL
Jedox 2020.2.5 - Remote Code Execution via Executable Groovy-Scripts
Record summary
CVE-2022-47876 has a selected CVSS score of 9.1 (critical); EIP currently links 1 catalogued exploit.
Description
The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 30, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBJedox 2020.2.5 - Remote Code Execution via Executable Groovy-ScriptsExploitDB exploitby Team SysliftersNot analyzed1 file
References
3docs.syslifters.com
https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-47876