CVE-2022-4322

A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file AbstractScheduleJob.java of the component Scheduled Task Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 446eb7294332efca2bfd791bc37281cedac0d0ff. It is recommended to apply a patch to fix this issue. The identifier VDB-215013 was assigned to this vulnerability.

• CWE-707
• CWE-89

• https://gitee.com/makunet/maku-boot/commit/446eb7294332efca2bfd791bc37281cedac0d0ffPatch, Permissions Required, Third Party Advisory
• https://gitee.com/makunet/maku-boot/issues/I5ZUYIExploit, Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.215013Third Party Advisory
• https://gitee.com/makunet/maku-boot/commit/446eb7294332efca2bfd791bc37281cedac0d0ffPatch, Permissions Required, Third Party Advisory
• https://gitee.com/makunet/maku-boot/issues/I5ZUYIExploit, Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.215013Third Party Advisory

Published

Dec 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4321The PDF Generator for WordPress plugin before 1.1.2 includes…6.1
• CVE-2022-43212Billing System Project v1.0 was discovered to contain a SQL …9.8
• CVE-2022-43213Billing System Project v1.0 was discovered to contain a SQL …9.8
• CVE-2022-43214Billing System Project v1.0 was discovered to contain a SQL …9.8
• CVE-2022-43215Billing System Project v1.0 was discovered to contain a SQL …9.8
• CVE-2022-43216AbrhilSoft Employee's Portal before v5.6.2 was discovered to…9.1
• CVE-2022-43221open5gs v2.4.11 was discovered to contain a memory leak in t…7.5
• CVE-2022-43222open5gs v2.4.11 was discovered to contain a memory leak in t…7.5
• CVE-2022-43223open5gs v2.4.11 was discovered to contain a memory leak in t…7.5
• CVE-2022-43226Online Diagnostic Lab Management System v1.0 was discovered …8.8
• CVE-2022-43227Online Diagnostic Lab Management System v1.0 was discovered …7.2
• CVE-2022-43228Barangay Management System v1.0 was discovered to contain a …7.2