CVE-2022-47878
HIGHJedox <= 22.2 - Authenticated Remote Code Execution via Default Storage Path Misconfiguration
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-47878. PoCs published by Team Syslifters.
AI-analyzed exploit summary The exploit describes a vulnerability in Jedox 2020.2.5 where an authenticated attacker can set the default storage path to the web root directory, allowing arbitrary file uploads leading to remote code execution (RCE). The PoC outlines steps to exploit this via UI settings manipulation and file upload.
Description
Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that the vulnerability affects installations running version 22.2 or earlier. The issue was resolved with the version 22.3 and later versions are not affected. Additionally, the vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments.
Exploits (1)
The exploit describes a vulnerability in Jedox 2020.2.5 where an authenticated attacker can set the default storage path to the web root directory, allowing arbitrary file uploads leading to remote code execution (RCE). The PoC outlines steps to exploit this via UI settings manipulation and file upload.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H