CVE-2022-47879
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. The vendor states that the vulnerability affects installations running version 22.5 or earlier, and the issue was resolved with version 23.2.
Risk Assessment
The risk for the organization includes the possibility of an authenticated attacker gaining control over the server, which could lead to data theft, system modification, or further propagation of the attack within the internal network.
Recommendation
It is recommended to immediately upgrade Jedox to version 23.2 or later, which fixes this vulnerability. Additionally, restrict access to the /be/rpc.php file to trusted users only.
Original NVD description (English source)
A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected.