Critical severityNVD Advisory· Published Oct 25, 2022· Updated May 7, 2025
CVE-2022-41711
CVE-2022-41711
Description
Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
badaso/corePackagist | < 2.6.1 | 2.6.1 |
Affected products
2Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-fwvc-9xhj-26v5ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-41711ghsaADVISORY
- fluidattacks.com/advisories/harlowghsaWEB
- github.com/uasoft-indonesia/badaso/commit/22250eca7c364d991ce9e0a723941eae4889d6f9ghsaWEB
- github.com/uasoft-indonesia/badaso/issues/802ghsaWEB
- fluidattacks.com/advisories/harlow/mitre
News mentions
0No linked articles in our index yet.