CVE-2022-4322CWE-707

maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection

Medium · published December 7, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to apply a patch to fix this issue. The identifier VDB-215013 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.7th percentile
Weakness
CWE-707 · Improper Neutralization
Published
2022-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection
    cvelistv5