CVE-2022-46478

Published: 2023-01-13T01:15Z

Last Modified: 2025-04-07T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via crafted Hessian serialized data. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt