PT-2022-22282 · Jiusi Oa · Jiusi Oa

J0O1Ey · Published 2022-10-12 · Updated 2022-10-14 · CVE-2022-3467

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Jiusi OA (affected versions not specified)

Description A critical vulnerability was found in Jiusi OA, affecting an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the inforid argument leads to SQL injection. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Neutralization

Weakness Enumeration

CWE-707

Related Identifiers

CVE-2022-3467

Affected Products

Jiusi Oa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-3467 · Security Note
• https://t.me/cibsecurity/51267 · Telegram Post
• https://vuldb.com/?id.210709 · Note
• https://cnblogs.com/J0o1ey/p/16785375.html · Note