CVE-2022-30470: Afian Filerun

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the context of the webserver user.

Affected products

• Afian Filerun: version 2022.02.02 only

Published 2022-06-02. Last modified 2026-06-17.