CVE-2022-38400

EPSS 1.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 set 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

Produtos afetados

SYNCK GRAPHICA · Mailform Pro CGI

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/en/jp/JVN34205166/index.html https://www.synck.com/blogs/news/newsroom/detail_1661907555.html https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1381250709.html https://www.synck.com/downloads/cgi-perl/mailformpro/index.html