CVE-2022-41158

eyoom builder Remote Code Execution Vulnerability

State
Published
Severity
7.2 High
Published
Nov 25, 2022
Updated
Apr 29, 2025
Reserved
Sep 20, 2022

Read the record on cve.org

Description

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

Scores

CVSSScoreVectorSource
3.17.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hkrcert

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  • CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

ProductVersions
eyoom buildereyoom Co.,Ltd
  • 4.5.3 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.