CVE-2022-47878 (jedox)

May 2, 2023, 8:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code.

code cve default directory file input input validation location path settings storage validation webroot

Visit resource

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Security Engineer II, Engineering

@ Trail of Bits | Worldwide - Remote

View on infosec-jobs.com

Technical Support Engineer - Network Security

@ Ivanti | Bengaluru, India (Bagmane)

View on infosec-jobs.com

Senior Security Analyst- Container Threat and Vulnerability Management

@ Oracle | Philippines

View on infosec-jobs.com

Cybersecurity Strategy & Operations Officer (m/f/d)

@ Nordex Group | Madrid, ES, 28001

View on infosec-jobs.com

Security Administrator

@ ManTech | 201DT - 2251 Corp Park Dr, Herndon, VA

View on infosec-jobs.com

Cybersecurity Specialist

@ GFT Technologies | Sant Cugat del Vallès, B, ES, 08174

View on infosec-jobs.com

View more jobs

all InfoSec news

CVE-2022-47878 (jedox)

More from web.nvd.nist.gov / National Vulnerability Database

Jobs in InfoSec / Cybersecurity

Security Engineer II, Engineering

Technical Support Engineer - Network Security

Senior Security Analyst- Container Threat and Vulnerability Management

Cybersecurity Strategy & Operations Officer (m/f/d)

Security Administrator

Cybersecurity Specialist