What’s Vulnerable › Vulnerabilities
CVE-2022-0848: OS Command Injection in part-db/part-db
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 35.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-03-04 · updated 2026-06-17
- Weakness: CWE-78
Description
OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.
Affected products
- Part-DB-server: before 0.5.11 — fixed in 0.5.11
How to fix
Upgrade to a fixed version: Part-DB-server 0.5.11. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/166217/part-db-0.5.11-Remote-Code-Execution.html
- https://github.com/part-db/part-db/commit/9cd4eee393028aa4cab70fcbac284b0028c0bc95
- https://huntr.dev/bounties/3e91685f-cfb9-4ee4-abaf-9b712a8fd5a6
- http://packetstormsecurity.com/files/166217/part-db-0.5.11-Remote-Code-Execution.html
- https://github.com/part-db/part-db/commit/9cd4eee393028aa4cab70fcbac284b0028c0bc95
- https://huntr.dev/bounties/3e91685f-cfb9-4ee4-abaf-9b712a8fd5a6
Get alerted when CVE-2022-0848 or the next vulnerability affects your stack