Lucene search

CVE-2022-39812

🗓️ 27 Jan 2023 22:08:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthenticated user can upload files to an arbitrary path. An attacker can change the uploadDir parameter in a POS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2022-39812	27 Jan 202300:00	–	cvelist
Vulnrichment	CVE-2022-39812	27 Jan 202300:00	–	vulnrichment
NVD	CVE-2022-39812	27 Jan 202322:15	–	nvd
Prion	Path traversal	27 Jan 202322:15	–	prion

Nvd

Node

italtel netmatch-s_ciMatch5.2.0-20211008

Source	Link
gruppotim	www.gruppotim.it/it/footer/red-team.html

Parameter	Position	Path	Description	CWE
uploadDir	request body	/NMSCI-WebGui/SaveFileUploader	The application allows an unauthenticated user to upload files to an arbitrary path due to lack of validation on the uploadDir parameter.	CWE-22

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2023 22:15Current

7.3High risk

Vulners AI Score7.3

CVSS37.5

EPSS0.00237

SSVC

CWE-22