Lucene search
PRIOn knowledge basePRION:CVE-2022-24983HistoryFeb 16, 2022 - 10:15 p.m.
Remote code execution
2022-02-1622:15:00
PRIOn knowledge base
www.prio-n.com
3
Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jqueryform | eq | < 202225 |
Related
cve
cve
CVE-2022-24983
2022-02-16 22:15:07
CVE-2022-24984
2022-02-16 22:15:08
nvd
nvd
CVE-2022-24983
2022-02-16 22:15:07
CVE-2022-24984
2022-02-16 22:15:08
cvelist
cvelist
CVE-2022-24983
2022-02-16 21:04:34
CVE-2022-24984
2022-02-16 21:05:03
prion
prion
Design/Logic Flaw
2022-02-16 22:15:00