CVE-2022-30547

🗓️ 22 Aug 2022 18:24:03Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 102 Views

A directory traversal vulnerability in WWBN AVideo 11.6 & dev master commit 3f7c0364 allows arbitrary command execution

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-30547	15 Apr 202518:54	–	circl
CNNVD	WWBN AVideo 路径遍历漏洞	16 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-30547	22 Aug 202218:24	–	cvelist
Mend	CVE-2022-30547	22 Aug 202218:24	–	mend
NVD	CVE-2022-30547	22 Aug 202219:15	–	nvd
Prion	Directory traversal	22 Aug 202219:15	–	prion
Positive Technologies	PT-2022-20170 · Wwbn · Avideo	22 Aug 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-30547: Improper Limitation of a Pathname to a Restricted Directory	22 Aug 202200:00	–	rapid7
Talos	WWBN AVideo aVideoEncoder unzipDirectory directory traversal vulnerability	16 Aug 202200:00	–	talos
Talos Blog	Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypass	16 Aug 202215:54	–	talosblog

NVD

Vulners

Node

wwbn avideoMatch11.6

[
  {
    "product": "AVideo",
    "vendor": "WWBN",
    "versions": [
      {
        "status": "affected",
        "version": "11.6"
      },
      {
        "status": "affected",
        "version": "dev master commit 3f7c0364"
      }
    ]
  }
]

Source	Link
github	www.github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1547