CVE-2022-4322 - CVE House

Back to Database

Status published Medium CVE-2022-4322

maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection

6.3 CVSS

Vulnerability Description

A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to apply a patch to fix this issue. The identifier VDB-215013 was assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4322

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from unspecified

View All →

tatoeba2 Profile Name cross site scripting

pig-vector LogisticRegression.java LogisticRegression temp file

sslh Packet Dumping probe.c hexdump format string

collective.contact.widget widgets.py title cross site scripting

WP-Ban ban-options.php cross site scripting

Affected Vendor

unspecified

View all reports →

Affected Software

maku-boot

Vulnerable Versions:

2.0, 2.1, 2.2

Timeline

Official Publish: December 7th, 2022

Last Modified: April 15th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1071 Application Layer Protocol

Command and Control

T1565 Data Manipulation

T1005 Data from Local System