Security Advisory
CVE-2022-46478
9.8
CRITICAL
Vulnerability Description
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data.
Published Date
January 13, 2023
Official Source
NIST NVD Advisory