CVE-2022-47769

CriticalCVSS 9.8

Published: 01/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

61th percentile - higher than 61% of all known CVEs

Summary

An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files to the web root. Attackers can gain server access via a web shell.

Risk Assessment

The risk for the organization includes complete server takeover by an unauthenticated attacker, potentially leading to data theft, malware installation, or further attacks on the infrastructure.

Recommendation

Immediately update Fast Checkin to the latest patched version if available. Otherwise, restrict application access to trusted networks and implement file upload validation mechanisms.

Original NVD description (English source)

An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell.