CVE-2022-44786

An issue was discovered in Appalti & Contratti 9.12.2

High · published November 21, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00718 · 53.3th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    An issue was discovered in Appalti & Contratti 9.12.2
    cvelistv5