CVE-2022-24552

A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges. This affects StarWind SAN and NAS v0.2 build 1633.

• CWE-78

• https://www.starwindsoftware.com/security/sw-20220203-0001/Vendor Advisory
• https://www.starwindsoftware.com/security/sw-20220203-0001/Vendor Advisory

Published

Feb 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24547Windows Digital Media Receiver Elevation of Privilege Vulner…7.8
• CVE-2022-24548Microsoft Defender Denial of Service Vulnerability5.5
• CVE-2022-24549Windows AppX Package Manager Elevation of Privilege Vulnerab…7.8
• CVE-2022-2455A business logic issue in the handling of large repositories…6.5
• CVE-2022-24550Windows Telephony Server Elevation of Privilege Vulnerabilit…7.8
• CVE-2022-24551A flaw was found in StarWind Stack. The endpoint for setting…8.8
• CVE-2022-24553An issue was found in Zfaka <= 1.4.5. The verification of th…9.8
• CVE-2022-2456An issue has been discovered in GitLab CE/EE affecting all v…2.7
• CVE-2022-24562In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker …9.8
• CVE-2022-24563In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vul…5.4
• CVE-2022-24564Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vul…6.1
• CVE-2022-24565Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 …5.4