ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-25890

PoC —
CVSS 3.1
9.8 critical
EPSS
1%p70
Published
()
Modified
Description

All versions of the package wifey are vulnerable to Command Injection via the connect() function due to improper input sanitization.

Vendors
wifey project
Products
wifey
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.