CPanel::JSON::XS Vulnerability Allows for Sensitive Information Disclosure or Denial of Service
CVE-2022-48623

9.1CRITICAL

Key Information:

Vendor

Cpanel

Status
Vendor
CVE Published:
13 February 2024

What is CVE-2022-48623?

The Cpanel::JSON::XS package for Perl contains an out-of-bounds access vulnerability that can be exploited by attackers. Specifically, versions prior to 4.33 of this package are susceptible to scenarios where improper access can lead to the exposure of sensitive information or result in a denial of service. This issue arises from flaws in how the package handles bounds checking, which may allow malicious users to manipulate inputs to trigger unexpected behaviors, enabling unauthorized access to data or service interruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.