Vulnerability · Published May 22, 2022 · Assigned by @huntrdev
CVE-2022-1813OS Command Injection in yogeshojha/rengine
High 8.3
In plain English
A high-severity OS command injection in yogeshojha/rengine from yogeshojha. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.0)8.3High
Exploit odds (30 days)2.5%top 15.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| yogeshojha | yogeshojha/rengine | unspecified – before 1.2.0 |
Weakness: CWE-78 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
References
- https://huntr.dev/bounties/b255cf59-9ecd-4255-b9a2-b40b5ec6c572 x_refsource_CONFIRM
- https://github.com/yogeshojha/rengine/commit/8277cec0f008a0451371a92e7e0bf082ab3f0c34 x_refsource_MISC