high7.8
CVE-2022-23766
An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent.
Impact
An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bigfile | Bigfileagent | before 1.0.1.9 |