PT-2022-25436
CVE-2022-4064
·
تاريخ النشر
2022-11-19
·
تاريخ التحديث
2025-03-28
الوصف من
CVSS 4.0
6.3
متوسطةالمقاييسAV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Dalli (affected versions not specified)
Description
A vulnerability was found in the function
self.meta set of the file lib/dalli/protocol/meta/request formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used.Recommendations
To fix this issue, it is recommended to apply a patch. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. As a temporary workaround, consider disabling the
self.meta set function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾