Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2022-23848

Published: 20/02/2022 Updated: 28/02/2022
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Alluxio

Vulnerability Summary

In Alluxio prior to 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

alluxio alluxio

Github Repositories

https://github.com/cldrn/security-advisories

My security advisories

My latest public security advisories CVE-2022-21404: Applications using Oracle Helidon versions 09x, 010x, 011x, 10x, 11x, 12x, 13x, 14x, 200-M1, 200-M2, 200-M3, 200-M4 and 200-RC1 are affected by a remote code execution vulnerability caused by insecure YAML deserialization when using the class UrlConfigSource for loading configuration files remotely

References

NVD-CWE-noinfohttps://www.alluxio.io/download/releases/alluxio-2-7-3-release/https://nvd.nist.govhttps://github.com/cldrn/security-advisories
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook