First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-30122

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400 CWE-1333

Affected software

Vendor	Product	Versions
n/a	https://github.com/rack/rack	2.0.9.1, 2.1.4.1, 2.2.3.1

References

https://discuss.rubyonrails.org/t/cve-2022-30122-denial-of-service-vulnerability-in-rack-multipart-parsing/80729Third Party Advisory
https://security.gentoo.org/glsa/202310-18Third Party Advisory
https://security.netapp.com/advisory/ntap-20231208-0012/Third Party Advisory
https://www.debian.org/security/2023/dsa-5530Third Party Advisory
https://discuss.rubyonrails.org/t/cve-2022-30122-denial-of-service-vulnerability-in-rack-multipart-parsing/80729Third Party Advisory
https://security.gentoo.org/glsa/202310-18Third Party Advisory
https://security.netapp.com/advisory/ntap-20231208-0012/Third Party Advisory
https://www.debian.org/security/2023/dsa-5530Third Party Advisory

Timeline

Published: Dec 5, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-3012310.0A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint a CVE-2022-301246.8An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a m CVE-2022-301265.5In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of ser CVE-2022-301278.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-301288.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-301298.8Visual Studio Code Remote Code Execution Vulnerability CVE-2022-30139.8A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the fil CVE-2022-301303.3.NET Framework Denial of Service Vulnerability CVE-2022-301317.8Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability CVE-2022-301327.8Windows Container Manager Service Elevation of Privilege Vulnerability CVE-2022-301339.8Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability CVE-2022-301346.5Microsoft Exchange Server Information Disclosure Vulnerability