CVE-2022-45132 - CVE House
Back to Database
Status published Unknown CVE-2022-45132

In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code...

Vulnerability Description

In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template in a way that can be used to trigger remote code execution in the LAVA server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45132

Credits & Attribution

No credits recorded in the NVD database.

References

More from linaro

View All →
CVE-2022-44641
In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with...
Unknown 0
CVE-2022-42902
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is...
Unknown 0
CVE-2018-12565
An issue was discovered in Linaro LAVA before 2018.5.post1. Because...
High 8.8
CVE-2018-12564
An issue was discovered in Linaro LAVA before 2018.5.post1. Because...
Medium 6.5
CVE-2018-12563
An issue was discovered in Linaro LAVA before 2018.5.post1. Because...
Medium 6.5

Affected Vendor

Affected Software

lava
Vulnerable Versions:
0

Timeline

Official Publish: November 18th, 2022
Last Modified: April 30th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.