Lucene search

K
cveMitreCVE-2022-46492
HistoryDec 23, 2022 - 1:15 a.m.

CVE-2022-46492

2022-12-2301:15:08
CWE-22
mitre
web.nvd.nist.gov
24
cve-2022-46492
nbnbk
arbitrary file read
vulnerability
api security

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

41.5%

nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.

Affected configurations

Nvd
Node
nbnbk_projectnbnbkMatch-
VendorProductVersionCPE
nbnbk_projectnbnbk-cpe:2.3:a:nbnbk_project:nbnbk:-:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

41.5%

Related for CVE-2022-46492