VULNERABILITY INTELLIGENCE

CVE-2022-41711

CVSS score9.8 CRITICAL

EPSS probability2.08%

CISA KEVNot currently listed

Published2022-10-25

Last modified2026-06-17

Description

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.