CVE-2022-31860

概要

参考情報

• openremote/openremote · Product
• securityblog101.blogspot.com/2022/09/cve-2022-31860.html · Exploit
• stackoverflow.com/questions/159148/groovy-executing-shell-commands · Third Party Advisory
• stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices · Third Party Advisory

openremote のその他の脆弱性

• CVE-2026-62238高 8.8OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs Post…
• CVE-2026-41166高 7.0OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can ca…
• CVE-2026-40882高 7.6OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled X…
• CVE-2026-39842緊急 9.9OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the ru…