CVE-2022-47878

Published: 2023-05-02T20:15Z

Last Modified: 2025-01-30T16:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt