CVE-2022-41875

10

CRITICALCVSS v3

Published

November 23, 2022

Affected

2 projects

Assigned by

GitHub

Severity scale

010

Description

A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked system running Optica. The vulnerability was patched in v. 0.10.2, where the call to the function `oj.load` was changed to `oj.safe_load`.

airbnb/optica

GitHubA tool for keeping track of nodes in your infrastructure

< 0.10.2NVD

ohler55/oj

GitHubOptimized JSON

NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2022-41875

Description

More on this CVE