What is CVE-2022-41875?

CVE-2022-41875 is a critical-severity vulnerability in Airbnb Optica, classified under Deserialization of Untrusted Data. CVSS score: 10.0/10. Published 2022-11-23.

How severe is CVE-2022-41875?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Deserialization in Airbnb Optica

CVE-2022-41875

A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked s…

Vulnerability class: Insecure Deserialization

EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Airbnb Optica — versions < 0.10.2

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

security-advisories@github.com (Third Party Advisory)
security-advisories@github.com (Third Party Advisory)
security-advisories@github.com (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2022-41875?: CVE-2022-41875 is a critical-severity vulnerability in Airbnb Optica, classified under Deserialization of Untrusted Data. CVSS score: 10.0/10. Published 2022-11-23.
How severe is CVE-2022-41875?: Critical severity. CVSS v3 base score is 10.0 out of 10.