Freshtomato
Approved changes feed: RSS · Atom
cpe:2.3:a:freshtomato:freshtomato:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Freshtomato (42cbfdb1-3351-5495-a03c-f8e7eb85cc12) |
|---|---|
| Product | Freshtomato (a0f033c2-64b2-5fa7-ba48-61f58d2ca509) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3991 |
vulnerable | 2026-06-08 06:09:40.979050 |
OS command injection vulnerability in FreshTomato 2023.3
CRITICAL (10)
An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2023-10-16T09:07:46.666Z
Updated: 2024-09-16T16:37:12.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42484 |
vulnerable | 2026-06-08 05:49:30.096023 |
Details available
CRITICAL (9.1)
An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2023-01-30T10:12:04.966Z
Updated: 2024-08-03T13:10:40.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38451 |
vulnerable | 2026-06-08 05:47:16.410973 |
Details available
MEDIUM (6.8)
A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2023-01-30T10:11:51.438Z
Updated: 2024-08-03T10:54:03.887Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28665 |
vulnerable | 2026-06-08 05:42:44.952712 |
Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-arm` has a vulnerable URL-decoding feature that can lead to memory corruption.
Published: 2022-08-05T21:20:22.121Z
Updated: 2025-04-15T18:52:54.323Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28664 |
vulnerable | 2026-06-08 05:42:44.951293 |
Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has a vulnerable URL-decoding feature that can lead to memory corruption.
Published: 2022-08-05T21:20:13.537Z
Updated: 2025-04-15T18:53:01.397Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.