PT-2022-16253 · Unknown · Bigfileagent

Published 2022-09-19 · Updated 2023-06-27 · CVE-2022-23766

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BigFileAgent (affected versions not specified)

Description An improper input validation issue allows for arbitrary file execution in BigFileAgent. Attackers can exploit this by having victims access a malicious web page or by inserting a script using XSS into a general website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-23766

Affected Products

Bigfileagent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-23766 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23766 · Vendor Advisory
• https://t.me/cvenotify/36614 · Telegram Post
• https://t.me/cibsecurity/50096 · Telegram Post
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66925 · Note