CVE-2022-22909
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 45%
from disclosure to weapon0 days
Published on NVDMar 2
1st PoCFeb 17
exploitation probability
45%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/50754unverifiedgithubgithub.com/0z09e/CVE-2022-22909★ 5githubgithub.com/kaal18/CVE-2022-22909★ 2⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.