Packagist/badaso/core CVE-2022-41711: critical 9.8, EPSS 2.08%
Badaso vulnerable to Remote Code Execution via malicious file upload
Action: Upgrade badaso/core to 2.6.1 or later.
composer require badaso/core:2.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
Fixed versions
| 2.6.1 |
Sources
- osv: GHSA-fwvc-9xhj-26v5
- https://nvd.nist.gov/vuln/detail/CVE-2022-41711
- https://github.com/uasoft-indonesia/badaso/issues/802
- https://github.com/uasoft-indonesia/badaso/commit/22250eca7c364d991ce9e0a723941eae4889d6f9
- https://fluidattacks.com/advisories/harlow
- https://github.com/uasoft-indonesia/badaso
CVE-2022-41711 · published · modified · JSON