CVE-2022-28684 – This vulnerability allows remote attackers to execute arbitrary code on affected installat …

3 August 2022

Vuln ID: CVE-2022-28684

Published: 2022-08-03 16:15:08Z

Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-16710.

Source: NVD.NIST.GOV

Date:

3 August 2022

Categorie(s):

NVD

Tag(s):

NVD

Indian bank’s IT is so shabby it’s been banned from opening new accounts25 April 2024
Node.js in Security? Don’t Get Hacked – Secure Your Code Now! 25 April 2024
Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs25 April 2024
Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks25 April 2024
A Comprehensive Cyber Guide: Best Practices for Small Businesses25 April 2024