CVE-2022-37786

Summary

An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/WeBankPartners/wecube-platform
• https://github.com/WeBankPartners/wecube-platform/issues/2327

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/WeBankPartners/wecube-platform
• https://github.com/WeBankPartners/wecube-platform/issues/2327

• ←Previous
• Next→