CVE-2022-22793

🗓️ 24 Feb 2022 16:14:16Reported by INCDType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 72 Views🌐 WEB

Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCDODED PATH and read Local Files inside the server

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-22793	14 Feb 202210:16	–	attackerkb
Circl	CVE-2022-22793	24 Feb 202220:14	–	circl
CNNVD	Cybonet PineApp Mail Secure 安全漏洞	24 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22793 Cybonet - PineApp Mail Relay Local File Inclusion	24 Feb 202216:14	–	cvelist
EUVD	EUVD-2022-27936	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22793	24 Feb 202217:15	–	nvd
Prion	Design/Logic Flaw	24 Feb 202217:15	–	prion
Positive Technologies	PT-2022-15682 · Cybonet · Cybonet Pineapp Mail Relay	24 Feb 202200:00	–	ptsecurity

NVD

Node

cybonet pineapp_mail_secureMatch-

[
  {
    "product": "Pineapp Mail Relay",
    "vendor": "Cybonet",
    "versions": [
      {
        "status": "affected",
        "version": "PineApp  Latest"
      }
    ]
  }
]

Source	Link
gov	www.gov.il/en/departments/faq/cve_advisories

Parameter	Position	Path	Description	CWE
filesystem_path	query param	/manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCODED PATH	Local File Inclusion via filesystem_path parameter to read server files	CWE-22

21 Nov 2024 06:47Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

CVSS 3.16.1 - 7.5

EPSS0.00305