Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-40497
8.8
HIGHCVSS v3
Published
September 28, 2022
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
wazuh/wazuh
GitHubWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
GitHubWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.>= 3.6.1, <= 3.13.5, >= 4.0.0, <= 4.2.7, >= 4.3.0, <= 4.3.7NVD
NPM
Docker Hub