CVE-2022-23766CWE-20

BigFileAgent arbitrary file execution vulnerability

High · published September 19, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-09-19T19:52Z
EPSS history
Timeline
  • 19 SEP 19:52Z
    BigFileAgent arbitrary file execution vulnerability
    cvelistv5