What’s Vulnerable › Vulnerabilities
CVE-2022-31860
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-09-06 · updated 2026-06-17
- Weakness: CWE-94
Description
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.
Affected products
- openremote: through 1.0.4
References
- https://github.com/openremote/openremote/
- https://securityblog101.blogspot.com/2022/09/cve-2022-31860.html
- https://stackoverflow.com/questions/159148/groovy-executing-shell-commands
- https://stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices
- https://github.com/openremote/openremote/
- https://securityblog101.blogspot.com/2022/09/cve-2022-31860.html
- https://stackoverflow.com/questions/159148/groovy-executing-shell-commands
- https://stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices
Get alerted when CVE-2022-31860 or the next vulnerability affects your stack