Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sonicjs Subscribe
Filtered by product Sonicjs
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42002 1 Sonicjs 1 Sonicjs 2022-10-04 N/A 9.1 CRITICAL
SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.