{
  "GSD": {
    "alias": "CVE-2022-41705",
    "id": "GSD-2022-41705"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-41705"
      ],
      "details": "Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.",
      "id": "GSD-2022-41705",
      "modified": "2023-12-13T01:19:32.800147Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "help@fluidattacks.com",
        "ID": "CVE-2022-41705",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Badaso",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "2.6.3"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Remote command execution"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://fluidattacks.com/advisories/headhunterz/",
            "refsource": "MISC",
            "url": "https://fluidattacks.com/advisories/headhunterz/"
          },
          {
            "name": "https://github.com/uasoft-indonesia/badaso/",
            "refsource": "MISC",
            "url": "https://github.com/uasoft-indonesia/badaso/"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003c2.7.0",
          "affected_versions": "All versions before 2.7.0",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-434",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-12-02",
          "description": "Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.",
          "fixed_versions": [
            "2.7.0"
          ],
          "identifier": "CVE-2022-41705",
          "identifiers": [
            "GHSA-g389-rf5p-fg56",
            "CVE-2022-41705"
          ],
          "not_impacted": "All versions starting from 2.7.0",
          "package_slug": "packagist/badaso/core",
          "pubdate": "2022-11-25",
          "solution": "Upgrade to version 2.7.0 or above.",
          "title": "Unrestricted Upload of File with Dangerous Type",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-41705",
            "https://fluidattacks.com/advisories/headhunterz/",
            "https://github.com/uasoft-indonesia/badaso/",
            "https://github.com/uasoft-indonesia/badaso/issues/818",
            "https://github.com/advisories/GHSA-g389-rf5p-fg56"
          ],
          "uuid": "0e5a4da1-2ef6-46f1-abe5-e40421d93a15"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:uatech:badaso:2.6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "help@fluidattacks.com",
          "ID": "CVE-2022-41705"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-434"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/uasoft-indonesia/badaso/",
              "refsource": "MISC",
              "tags": [
                "Product"
              ],
              "url": "https://github.com/uasoft-indonesia/badaso/"
            },
            {
              "name": "https://fluidattacks.com/advisories/headhunterz/",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory"
              ],
              "url": "https://fluidattacks.com/advisories/headhunterz/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-11-30T16:08Z",
      "publishedDate": "2022-11-25T18:15Z"
    }
  }
}