CVE-2022-41945

CVSS V2 None CVSS V3 None
Description
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ??into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.
Overview
  • CVE ID
  • CVE-2022-41945
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-21T23:15:10
  • Last Modified Date
  • 2023-03-01T18:03:15
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
CWE-77 http://cwe.mitre.org/data/definitions/77.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:super-xray_project:super-xray:0.1:beta:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://github.com/4ra1n/super-xray/security/advisories/GHSA-732j-763p-cvqg
https://github.com/4ra1n/super-xray/releases/tag/0.2-beta
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-41945
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41945
History
Created Old Value New Value Data Type Notes
2022-11-22 00:00:15 Added to TrackCVE
2022-12-07 17:58:03 2022-11-21T23:15Z 2022-11-21T23:15:10 CVE Published Date updated
2022-12-07 17:58:03 2022-11-28T13:54:10 CVE Modified Date updated
2022-12-07 17:58:03 Analyzed Vulnerability Status updated
2022-12-07 17:58:03 CWE-77 Weakness Enumeration new
2022-12-07 17:58:04 CPE Information updated
2023-01-25 03:15:54 2023-01-25T02:01:31 CVE Modified Date updated
2023-01-25 03:15:54 Analyzed Modified Vulnerability Status updated
2023-01-25 03:15:55 Weakness Enumeration update
2023-01-26 13:14:38 Modified Undergoing Analysis Vulnerability Status updated
2023-03-01 18:13:07 2023-03-01T18:03:15 CVE Modified Date updated
2023-03-01 18:13:07 Undergoing Analysis Analyzed Vulnerability Status updated