CVE-2022-25171

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p83

Published

Dec 20, 2022 (Dec 20, 2022)

Modified

Jun 17, 2026

Description

The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization

Vendors: p4 project
Products: p4
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.