CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java. Its EPSS score suggests a 42.2% probability of exploitation in the next 30 days.
CVE
CVE-2022-34267
Severity
CRITICAL
CVSS
9.8
EPSS
42.16%
Java
Original NVD Description
An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.
Related CVEs
Other vulnerabilities affecting the same vendor(s)