CVE-2022-23766: Bigfile Bigfileagent

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.

Affected products

• Bigfile Bigfileagent: before 1.0.1.9 (fixed in 1.0.1.9)

Published 2022-09-19. Last modified 2026-06-17.