← All advisories

High severity8.8NVD Advisory· Published Oct 30, 2022· Updated Jun 17, 2026

CVE-2022-44019

CVE-2022-44019

Description

In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totaljs/Totaljs2 versions
cpe:2.3:a:totaljs:total.js:*:*:*:*:*:node.js:*:*+ 1 more
- cpe:2.3:a:totaljs:total.js:*:*:*:*:*:node.js:*:*range: <2022-09-26
- (no CPE)range: <0e5ace7
Total.js/Total.jsdescription

Patches

Vulnerability mechanics

References

3

github.com/totaljs/code/issues/12nvdExploitIssue TrackingThird Party Advisory
www.edoardoottavianelli.it/CVE-2022-44019/nvdExploitThird Party Advisory
www.youtube.com/watchnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.