CVE-2022-26111
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an existing/predefined search) of the documents.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.93%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an existing/predefined search) of the documents. The search components permit adding BeanShell expressions that result in Remote Code Execution in the context of the IRISNext application user, running on the web server.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 3.93% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-917
- Affected
- canon/irisnext
- Source
- cve@mitre.org
References
- https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-26111.pdfExploit, Third Party Advisory
- https://varsnext.iriscorporate.com/Product, Vendor Advisory
- https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-26111.pdfExploit, Third Party Advisory
- https://varsnext.iriscorporate.com/Product, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.