Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-22722

EPSS 0.08% · P23
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-22722

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Form Tools 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Form Tools是开源的一个表单工具脚本、模块、主题和 API 的代码库。 Form Tools 3.1.1版本存在安全漏洞，该漏洞源于允许攻击者通过应用程序添加表单部分下的 Group Name字段运行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2024-22722

#POC DescriptionSource LinkShenlong Link
1CVE-2024-22722 RCE via SSTI, automated with Python.https://github.com/terribledactyl/Form-Tools-3.1.1-RCEPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-22722

请登录查看更多情报信息。

Same Patch Batch · n/a · 2024-04-11 · 23 CVEs total

CVE-2024-215089.8 CRITICALmysql2 安全漏洞
CVE-2024-31678Loan Management System 安全漏洞
CVE-2023-48865Reportico 安全漏洞
CVE-2024-28458swfdump 安全漏洞
CVE-2024-27592website 安全漏洞
CVE-2024-25852Linksys RE7000 安全漏洞
CVE-2024-25376Thesycon Software Solutions TUSBAudio 安全漏洞
CVE-2024-22721Form Tools 跨站请求伪造漏洞
CVE-2024-22719Form Tools SQL注入漏洞
CVE-2024-22718Form Tools 安全漏洞
CVE-2024-22717Form Tools 安全漏洞
CVE-2024-30878RageFrame2 安全漏洞
CVE-2023-29483Eventlet 安全漏洞
CVE-2024-29399GNU Savane 安全漏洞
CVE-2024-30917eProsima Fast DDS 安全漏洞
CVE-2024-30916eProsima Fast DDS 安全漏洞
CVE-2024-30915Object Computing OpenDDS 安全漏洞
CVE-2024-30885HadSky 安全漏洞
CVE-2024-30884Discuz! 安全漏洞
CVE-2024-30883RageFrame2 安全漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2024-22722

No comments yet

Leave a comment