CVE-2022-21230

🗓️ 01 May 2022 15:20:21Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 105 Views

CVE-2022-21230 affects org.nanohttpd:nanohttpd, leading to insecure file permissions

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-21230	1 May 202215:19	–	attackerkb
CNNVD	NanoHTTPD 安全漏洞	1 May 202200:00	–	cnnvd
CNVD	NanoHTTPD Information Disclosure Vulnerability	7 May 202200:00	–	cnvd
Cvelist	CVE-2022-21230 Information Exposure	1 May 202215:20	–	cvelist
EUVD	EUVD-2022-26457	3 Oct 202520:07	–	euvd
NVD	CVE-2022-21230	1 May 202216:15	–	nvd
Prion	Directory traversal	1 May 202216:15	–	prion
Snyk	Information Exposure	15 Mar 202213:56	–	snyk
Veracode	Information Disclosure	5 May 202206:34	–	veracode
vulnersOsv	ai.h2o:h2o-clustering (>=3.32.1.1 <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2 <=3.44.0.2) +211 more potentially affected by CVE-2022-21230 via org.nanohttpd:nanohttpd (>=2.2.0 <=2.3.1)	15 Mar 202213:56	–	vulnersosv

NVD

Node

nanohttpd nanohttpdRange≤2.3.1

[
  {
    "product": "org.nanohttpd:nanohttpd",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/JLLeitschuh/security-research/security/advisories/GHSA-2r85-x9cf-8fcg
github	www.github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/core/src/main/java/org/nanohttpd/protocols/http/tempfiles/DefaultTempFileManager.java%23L60
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGNANOHTTPD-2422798
github	www.github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/core/src/main/java/org/nanohttpd/protocols/http/tempfiles/DefaultTempFile.java%23L58

21 Nov 2024 06:44Current

5.3Medium risk

Vulners AI Score5.3

CVSS 22.1

CVSS 3.15.5

EPSS0.0005