Lucene search

K
cveMitreCVE-2022-48253
HistoryJan 11, 2023 - 3:15 a.m.

CVE-2022-48253

2023-01-1103:15:10
CWE-22
mitre
web.nvd.nist.gov
25
cve-2022-48253
nhttpd
nostromo
path traversal
remote code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

62.7%

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.

Affected configurations

Nvd
Node
nazgulnostromoRange<2.1
VendorProductVersionCPE
nazgulnostromo*cpe:2.3:a:nazgul:nostromo:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

62.7%

Related for CVE-2022-48253