CVE-2022-41875: Remote Code Execution in Optica
A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked system running Optica. The vulnerability was patched in v. 0.10.2, where the call to the function oj.load was changed to oj.safeload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41875?
CVE-2022-41875 is categorized as a high severity remote code execution vulnerability.
How do I fix CVE-2022-41875?
To mitigate CVE-2022-41875, upgrade to Airbnb Optica version 0.10.2 or later.
What systems are affected by CVE-2022-41875?
CVE-2022-41875 affects all versions of Airbnb Optica prior to 0.10.2.
Can CVE-2022-41875 be exploited without authentication?
Yes, CVE-2022-41875 can be exploited by unauthenticated attackers using specially crafted JSON payloads.
What type of vulnerability is CVE-2022-41875?
CVE-2022-41875 is a remote code execution vulnerability allowing unauthorized code execution on the server.