CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-24193
Critical (9.8) in icewhale casaos. EPSS 5.5% chance of exploitation in the next 30 days. Fixed in github.com/IceWhaleTech/CasaOS 0.2.8.
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
Severity
- EPSS
- 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- icewhale:casaos
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jh63-28gx-7p26 | Go | github.com/IceWhaleTech/CasaOS | <0.2.8 | 0.2.8 |
| GO-2022-0606 | Go | github.com/IceWhaleTech/CasaOS | <0.2.8 | 0.2.8 |
References
- https://github.com/IceWhaleTech/CasaOS/commit/d060968b7ab08e7f8cbfe7ca9ccdfa47afe9bb06
- https://github.com/IceWhaleTech/CasaOS/issues/84
- https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/
- https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/#more
- https://github.com/IceWhaleTech/CasaOS/commit/d060968b7ab08e7f8cbfe7ca9ccdfa47afe9bb06