CVE-2022-0749

Description

This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.5

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-0749 are affected in Nuget - SinGooCMS.Utility 1.6.2	Windows
Vulnerabilities CVE-2022-0749 are affected in Nuget - SinGooCMS.Utility for Linux 1.6.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234