PT-2023-15468 · Last Yard · Last Yard

L00Neyhacker · Published 2023-02-01 · Updated 2023-08-08 · CVE-2022-47717

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Last Yard version 22.09.8-1

Description The issue concerns Cross-origin resource sharing (CORS), which is a security feature that restricts web pages from making requests to a different origin (domain, protocol, or port) than the one the web page was loaded from. This helps prevent malicious scripts from making unauthorized requests on behalf of the user. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For version 22.09.8-1, update to a version that includes a fix for the CORS issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-942

Related Identifiers

CVE-2022-47717

Affected Products

Last Yard

References · 6

• 🔥 https://github.com/l00neyhacker/CVE-2022-47717 · Exploit
• https://osv.dev/vulnerability/CVE-2022-47717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47717 · Security Note
• https://t.me/cvenotify/43308 · Telegram Post
• https://t.me/cvenotify/43940 · Telegram Post
• https://t.me/cibsecurity/57282 · Telegram Post