Skip to content
OpenAdvisories
High · 7.8 CVE-2022-23766 EUVD-2022-28702GHSA-c4p4-h5p6-286x

BigFileAgent arbitrary file execution vulnerability

Published Sep 19, 2022 · Updated May 29, 2025 · Assigned by krcert

Description

An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.

Affected products

VendorProductAffectedFixed
Bluetree BigFileAgent unspecified – ≤ 1.0.1.9 —

References