Skip to content
OpenAdvisories
High · 7.2 CVE-2022-41158 EUVD-2022-44399GHSA-qj9h-vqcc-rfjq

eyoom builder Remote Code Execution Vulnerability

Published Nov 25, 2022 · Updated Apr 29, 2025 · Assigned by krcert

Description

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

Affected products

VendorProductAffectedFixed
eyoom eyoom builder unspecified – ≤ 4.5.3 —

References