CVE-2022-22914

Опубликовано: 17 фев. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal.

Ссылки

http://ovidentia.com
Broken Link
Not Applicable
https://gitlab.com/albadotpy/ovidentia-information-disclosure-on-upload-directory-content
Exploit
Third Party Advisory
http://ovidentia.com
Broken Link
Not Applicable
https://gitlab.com/albadotpy/ovidentia-information-disclosure-on-upload-directory-content
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ovidentia:ovidentia:6.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00741

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-2f7g-8vxw-jmrr

github

почти 4 года назад