CyberSecBulletin

Badaso vulnerabilities

We track 2 vulnerabilities in Badaso products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2022.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Badaso vulnerabilities

  • 9.8 Critical severity

    Badaso: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41705BadasoEPSS 2%

    Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

  • 9.8 Critical severity

    Badaso: Unrestricted Upload of File with Dangerous Type

    CVE-2022-41711BadasoEPSS 2.13%

    Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.