PT-2022-13470 · Part-Db · Part-Db

Published 2022-03-04 · Updated 2022-04-08 · CVE-2022-0848

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions part-db/part-db versions prior to 0.5.11

Description The issue is related to OS Command Injection in the GitHub repository part-db/part-db.

Recommendations For versions prior to 0.5.11, update to version 0.5.11 or later to resolve the issue.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-0848

Affected Products

Part-Db

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0848.json · Exploit
• 🔥❌ https://github.com/logm1lo/CVE-2022-0848-RCE · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/50800 · Exploit
• 🔥 http://packetstormsecurity.com/files/166217/part-db-0.5.11-Remote-Code-Execution.html · Exploit
• 🔥 https://huntr.dev/bounties/3e91685f-cfb9-4ee4-abaf-9b712a8fd5a6 · Exploit
• https://github.com/part-db/part-db/commit/9cd4eee393028aa4cab70fcbac284b0028c0bc95 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0848 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0848 · Vendor Advisory
• https://t.me/cvenotify/28023 · Telegram Post