Lucene search
HistorySep 28, 2022 - 2:15 p.m.
CVE-2022-40082
hertz
v0.3.0
path traversal
vulnerability
normalizepath
cve-2022-40082
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
48.8%
Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function.
Affected configurations
Node
microsoftwindowsMatch-
cloudwegohertzMatch0.3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloudwego:hertz | cloudwego hertz | eq | 0.3.0 |
Social References
More
Related
prion
prion
Path traversal
2022-09-28 14:15:00
cnvd
cnvd
Hertz path traversal vulnerability
2022-09-30 00:00:00
osv
osv
CVE-2022-40082
2022-09-28 14:15:10
Hertz contains path traversal via normalizePath function
2022-09-29 00:00:26
Path traversal in github.com/cloudwego/hertz
2022-10-05 18:02:53
cvelist
cvelist
CVE-2022-40082
2022-09-28 13:34:02
github
github
Hertz contains path traversal via normalizePath function
2022-09-29 00:00:26
nvd
nvd
CVE-2022-40082
2022-09-28 14:15:10
veracode
veracode
Path Traversal
2022-09-29 04:48:15
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
48.8%
Related for CVE-2022-40082