Логотип exploitDog
bind:CVE-2022-4065
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-4065

Количество 8

Количество 8

ubuntu логотип

CVE-2022-4065

около 3 лет назад

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2022-4065

около 3 лет назад

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2022-4065

около 3 лет назад

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2022-4065

около 3 лет назад

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It ...

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2568-1

больше 1 года назад

Security update for mockito, snakeyaml, testng

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1690-1

почти 3 года назад

Security update for testng

EPSS: Низкий
github логотип

GHSA-rc2q-x9mf-w3vf

около 3 лет назад

TestNG is vulnerable to Path Traversal

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2024-02111

около 3 лет назад

Уязвимость функции testngXmlExistsInJar (testng-core/src/main/java/org/testng/JarFileUtils.java) фреймворка для тестирования Java-приложений TestNG, позволяющая нарушителю выполнить произвольный код

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 5.5
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 7
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.

CVSS3: 5.5
0%
Низкий
около 3 лет назад
debian логотип
CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It ...

CVSS3: 5.5
0%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2024:2568-1

Security update for mockito, snakeyaml, testng

0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:1690-1

Security update for testng

0%
Низкий
почти 3 года назад
github логотип
GHSA-rc2q-x9mf-w3vf

TestNG is vulnerable to Path Traversal

CVSS3: 7.8
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2024-02111

Уязвимость функции testngXmlExistsInJar (testng-core/src/main/java/org/testng/JarFileUtils.java) фреймворка для тестирования Java-приложений TestNG, позволяющая нарушителю выполнить произвольный код

CVSS3: 5.5
0%
Низкий
около 3 лет назад

Уязвимостей на страницу