CVE-2022-31860

Mô tả

Tham khảo

• openremote/openremote · Product
• securityblog101.blogspot.com/2022/09/cve-2022-31860.html · Exploit
• stackoverflow.com/questions/159148/groovy-executing-shell-commands · Third Party Advisory
• stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices · Third Party Advisory

Lỗ hổng khác của openremote

• CVE-2026-62238CAO 8.8OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs Post…
• CVE-2026-41166CAO 7.0OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can ca…
• CVE-2026-40882CAO 7.6OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled X…
• CVE-2026-39842NGHIÊM TRỌNG 9.9OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the ru…