Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-2969

Опубликовано: 01 дек. 2022
Источник: nvd
CVSS3: 8.1
CVSS3: 7.5
EPSS Низкий

Описание

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname, which can cause the pathname to resolve to a location outside of the restricted directory.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:deltaww:dialink:*:*:*:*:*:*:*:*
Версия до 1.5.0.0 (исключая)
cpe:2.3:a:deltaww:dialink:1.5.0.0:beta3:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00201
Низкий

8.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
github
около 3 лет назад

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname, which can cause the pathname to resolve to a location outside of the restricted directory.

EPSS

Процентиль: 42%
0.00201
Низкий

8.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-22