Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-28946

EPSS 0.43% · P63
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-28946

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open Policy Agent 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open Policy Agent是一个开源的通用策略引擎，可在整个堆栈中实现统一的、上下文感知的策略实施。 Open Policy Agent v0.39.0 版本存在安全漏洞，该漏洞源于 ast/parser.go 中的问题导致应用程序错误地解释每个表达式，通过触发超出范围的内存访问导致拒绝服务 (DoS)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-28946

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-28946

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-05-19 · 17 CVEs total

CVE-2022-29652Online Sports Complex Booking System SQL注入漏洞
CVE-2022-29304Online Sports Complex Booking System SQL注入漏洞
CVE-2022-28962Online Sports Complex Booking System SQL注入漏洞
CVE-2022-28961SPIP SQL注入漏洞
CVE-2022-28960SPIP 代码注入漏洞
CVE-2022-28959SPIP 跨站脚本漏洞
CVE-2022-28948Go-Yaml 代码问题漏洞
CVE-2022-28927Subconverter 代码问题漏洞
CVE-2021-37413GRANDCOM DynWEB SQL注入漏洞
CVE-2022-22976Spring Framework 输入验证错误漏洞
CVE-2021-41938ShopXO 代码问题漏洞
CVE-2022-30018Mobotix Control Center 安全漏洞
CVE-2022-28349Arm Mali GPU Kernel Driver 资源管理错误漏洞
CVE-2022-28350Arm Mali GPU Kernel Driver 资源管理错误漏洞
CVE-2022-28348Arm Mali GPU Kernel Driver 资源管理错误漏洞
CVE-2022-22978VMware Spring Security 授权问题漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2022-28946

No comments yet

Leave a comment