San Pentah0wnage

Scheda tecnica

Divulgata il

4 aprile 2023

CVE

CVE-2022-43769CVE-2022-43939CVE-2022-43773CVE-2022-43940CVE-2022-43771CVE-2022-43941CVE-2022-3960

CVSS

8.8Sfruttata attivamente (CISA KEV)

Prodotto

Hitachi Vantara · Pentaho Business Analytics Server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

Fonti: research.aurainfosec.io