CVE-2022-33116

2022-06-2721:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal.

CPENameOperatorVersion
openeclasseqRelease_3.10.1
openeclasseqRelease_3.2.1
openeclasseqRelease_3.4
openeclasseqRelease_3.9
openeclasseqRelease_3.3
openeclasseqRelease_3.9.2
openeclasseqRelease_3.1.1
openeclasseqRelease_3.7.2
openeclasseqRelease_3.8
openeclasseqRelease_3.4.2

Name	Operator	Version
openeclass	eq	Release_3.10.1
openeclass	eq	Release_3.2.1
openeclass	eq	Release_3.4
openeclass	eq	Release_3.9
openeclass	eq	Release_3.3
openeclass	eq	Release_3.9.2
openeclass	eq	Release_3.1.1
openeclass	eq	Release_3.7.2
openeclass	eq	Release_3.8
openeclass	eq	Release_3.4.2