CVE-2022-30470

Name of the Vulnerable Software and Affected Versions Afian Filerun version 20220202

Description The issue allows remote code execution in the context of the webserver user by changing the search tika path variable to a custom and previously uploaded jar file.

Recommendations For Afian Filerun version 20220202, avoid using the search tika path variable to point to custom jar files until a fix is available. As a temporary workaround, consider restricting access to the search tika path variable to minimize the risk of exploitation.