Lucene search

VulDBCVE-2022-4583

HistoryDec 17, 2022 - 1:15 p.m.

CVE-2022-4583

2022-12-1713:15:09

CWE-22

VulDB

web.nvd.nist.gov

cve-2022-4583

jlems

vulnerability

remote attack

path traversal

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

A vulnerability was found in jLEMS. It has been declared as critical. Affected by this vulnerability is the function unpackJar of the file src/main/java/org/lemsml/jlems/io/util/JUtil.java. The manipulation leads to path traversal. The attack can be launched remotely. The name of the patch is 8c224637d7d561076364a9e3c2c375daeaf463dc. It is recommended to apply a patch to fix this issue. The identifier VDB-216169 was assigned to this vulnerability.

Affected configurations

Nvd

Node

neuromljlemsRange<2022-07-29lems

VendorProductVersionCPE
neuromljlems*cpe:2.3:a:neuroml:jlems:*:*:*:*:*:lems:*:*

Vendor	Product	Version	CPE
neuroml	jlems	*	cpe:2.3:a:neuroml:jlems::::::lems::*

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "jLEMS",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/LEMS/jLEMS/commit/8c224637d7d561076364a9e3c2c375daeaf463dc

github.com/LEMS/jLEMS/pull/103

vuldb.com/?id.216169

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Related for CVE-2022-4583