Lucene search

[email protected]NVD:CVE-2022-32328

HistoryJun 14, 2022 - 4:15 p.m.

CVE-2022-32328

2022-06-1416:15:08

CWE-22

[email protected]

web.nvd.nist.gov

fast food ordering system

delete any file

classes master file

vulnerability exploit

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

37.9%

JSON

Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img.

Affected configurations

Nvd

Node

fast_food_ordering_system_projectfast_food_ordering_systemMatch1.0

VendorProductVersionCPE
fast_food_ordering_system_projectfast_food_ordering_system1.0cpe:2.3:a:fast_food_ordering_system_project:fast_food_ordering_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fast_food_ordering_system_project	fast_food_ordering_system	1.0	cpe:2.3:a:fast_food_ordering_system_project:fast_food_ordering_system:1.0:::::::*

References

github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/fast-food-ordering-system/delet-file-1.md

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

37.9%

JSON

Related for NVD:CVE-2022-32328

prion1 cvelist1 cve1