CVE-2022-25936

🗓️ 30 Jan 2023 05:00:01Reported by snykType

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the filePath variable

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-25936	30 Jan 202307:36	–	circl
CNNVD	servst 路径遍历漏洞	30 Jan 202300:00	–	cnnvd
CVE	CVE-2022-25936	30 Jan 202305:00	–	cve
EUVD	EUVD-2023-0401	3 Oct 202520:07	–	euvd
Github Security Blog	Servst vulnerable to Path Traversal	30 Jan 202306:30	–	github
NVD	CVE-2022-25936	30 Jan 202305:15	–	nvd
OSV	CVE-2022-25936	30 Jan 202305:15	–	osv
OSV	GHSA-88V8-V46G-6C9W Servst vulnerable to Path Traversal	30 Jan 202306:30	–	osv
Prion	Directory traversal	30 Jan 202305:15	–	prion
RedhatCVE	CVE-2022-25936	6 Feb 202502:12	–	redhatcve

[
  {
    "product": "servst",
    "versions": [
      {
        "version": "0",
        "lessThan": "2.0.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
security	www.security.snyk.io/vuln/SNYK-JS-SERVST-3244896
gist	www.gist.github.com/lirantal/691d02d607753d54856f9335f9a1692f
github	www.github.com/andrepolischuk/servst/commit/f7cae5d2d7c64c86bc512e1e50614240396ef114

30 Jan 2023 05:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.01551