Description
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data.
Critical · 9.8
CVE-2022-46478
EUVD-2022-49282GHSA-h77f-99cf-c79f
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbit…
Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by mitre