CVE-2022-48623

Published: Feb 13, 2024Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.

Affected (1)

Products: Rurban: Cpanel\

Rurban

1 product

Cpanel\

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rurban Cpanel\	Before 4.33

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (8)

https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36

Source: cve@mitre.org

Product

https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b

Source: cve@mitre.org

Patch

https://github.com/rurban/Cpanel-JSON-XS/issues/208

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes

Source: cve@mitre.org

Release Notes

https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/rurban/Cpanel-JSON-XS/issues/208

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

Timeline

No history available yet.