CVE-2022-38614

Опубликовано: 09 сент. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

Ссылки

http://bpcbt.com
Vendor Advisory
http://smartvista.com
Not Applicable
https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614
Exploit
Third Party Advisory
http://bpcbt.com
Vendor Advisory
http://smartvista.com
Not Applicable
https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bpcbt:smartvista_cardgen:3.28.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00512

Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-7488-qf6w-cjjc