Lucene search

K
osvGoogleOSV:CVE-2022-22931
HistoryFeb 07, 2022 - 7:15 p.m.

CVE-2022-22931

2022-02-0719:15:08
Google
osv.dev
4

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%

Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%