What is CVE-2022-4428?

CVE-2022-4428 is a high-severity vulnerability in Cloudflare Warp, classified under Improper Input Validation. CVSS score: 8.9/10. Published 2023-01-11.

How severe is CVE-2022-4428?

High severity. CVSS v3 base score is 8.9 out of 10.

Improper input validation in Cloudflare Warp

CVE-2022-4428

support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send feedback" option. An attacker with access to the local file system could use a crafted XML config file pointing to a malicious file or set a local path to the executable using Cloudflare Zero Trust Dashboard (for Zero Trust enrolled clients).

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (49.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.9 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L.

Affected products

Cloudflare Warp — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cna@cloudflare.com (Product, Third Party Advisory)

Frequently asked questions

What is CVE-2022-4428?: CVE-2022-4428 is a high-severity vulnerability in Cloudflare Warp, classified under Improper Input Validation. CVSS score: 8.9/10. Published 2023-01-11.
How severe is CVE-2022-4428?: High severity. CVSS v3 base score is 8.9 out of 10.