CVE-2022-45771: Pwndoc Project Pwndoc

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file.

Affected products

• Pwndoc Project Pwndoc: version 0.5.3 only

Published 2022-12-05. Last modified 2026-06-17.