Packagist/badaso/core CVE-2022-41705: critical 9.8, EPSS 1.96%
Badaso vulnerable to Remote Code Execution (RCE)
Action: Upgrade badaso/core to 2.7.0 or later.
composer require badaso/core:2.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.0 | - |
Fixed versions
| 2.7.0 |
Sources
- osv: GHSA-g389-rf5p-fg56
- https://nvd.nist.gov/vuln/detail/CVE-2022-41705
- https://github.com/uasoft-indonesia/badaso/issues/818
- https://fluidattacks.com/advisories/headhunterz
- https://github.com/uasoft-indonesia/badaso
CVE-2022-41705 · published · modified · JSON