CVE-2022-1032CWE-502

Insecure deserialization of not validated module file in crater-invoice/crater

High · published March 29, 2022

CVSS v3.0
7.2
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01604 · 75.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-03-29T07:40Z
EPSS history
Timeline
  • 29 MAR 07:40Z
    Insecure deserialization of not validated module file in crater-invoice/crater
    cvelistv5