cve/2022/CVE-2022-41945.md

### [CVE-2022-41945](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41945)
![](https://img.shields.io/static/v1?label=Product&message=super-xray&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%3A%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')&color=brighgreen)

### Description

super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.

### POC

#### Reference
- https://github.com/4ra1n/super-xray/releases/tag/0.2-beta

#### Github
No PoCs found on GitHub currently.