PT-2022-17246 · Unknown · Dynamicweb

Published 2022-02-25 · Updated 2026-01-25 · CVE-2022-25369

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dynamicweb versions 9.5.0 through 9.12.7

Description The issue is related to a logic flaw that can lead to remote code execution (RCE) in Dynamicweb.

Recommendations For Dynamicweb versions 9.5.0 through 9.12.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2022-25369

Affected Products

Dynamicweb

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-25369 · Security Note
• https://assetnote.io/resources/research/advisory-dynamicweb-logic-flaw-leading-to-rce-cve-2022-25369 · Note
• https://twitter.com/CVEnew/status/2015362486216831251 · Twitter Post
• https://t.me/cybersecuritytechnologies/5488 · Telegram Post
• https://t.me/CVEtracker/42868 · Telegram Post
• https://dynamicweb.com/resources/downloads?Category=Releases · Note
• https://t.me/pentestingnews/19455 · Telegram Post