Lucene search
Redhat.comRH:CVE-2022-21682HistoryJan 17, 2022 - 7:49 p.m.
CVE-2022-21682
2022-01-1719:49:20
redhat.com
access.redhat.com
11
0.003 Low
EPSS
Percentile
70.9%
A path traversal vulnerability was found in Flatpak. This happens when flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the manifest, so running flatpak build against it will gain those permissions.
Related
osv
osv
CVE-2022-21682
2022-01-13 21:15:08
Moderate: flatpak-builder security and bug fix update
2022-11-08 06:20:08
Moderate: flatpak-builder security and bug fix update
2022-11-08 00:00:00
nessus
nessus
CentOS 8 : flatpak-builder (CESA-2022:7458)
2022-11-09 00:00:00
Rocky Linux 8 : flatpak-builder (RLSA-2022:7458)
2022-11-17 00:00:00
EulerOS 2.0 SP8 : flatpak (EulerOS-SA-2022-1343)
2022-03-28 00:00:00
cvelist
cvelist
CVE-2022-21682 flatpak-builder can access files outside the build directory.
2022-01-13 00:00:00
redhat
redhat
(RHSA-2022:7458) Moderate: flatpak-builder security and bug fix update
2022-11-08 06:20:08
ubuntucve
ubuntucve
CVE-2022-21682
2022-01-13 00:00:00
prion
prion
Path traversal
2022-01-13 21:15:00
oraclelinux
oraclelinux
flatpak-builder security and bug fix update
2022-11-15 00:00:00
rocky
rocky
flatpak-builder security and bug fix update
2022-11-08 06:20:08
almalinux
almalinux
Moderate: flatpak-builder security and bug fix update
2022-11-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for flatpak (EulerOS-SA-2022-1343)
2022-03-29 00:00:00
Fedora: Security Advisory for flatpak (FEDORA-2022-7e328bd66c)
2022-01-28 00:00:00
Fedora: Security Advisory for flatpak-builder (FEDORA-2022-7e328bd66c)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2022-21682
2022-01-13 21:15:00
cve
cve
CVE-2022-21682
2022-01-13 21:15:00
fedora
fedora
[SECURITY] Fedora 35 Update: flatpak-builder-1.2.2-1.fc35
2022-01-26 18:41:43
[SECURITY] Fedora 35 Update: flatpak-1.12.4-1.fc35
2022-01-26 18:41:42
[SECURITY] Fedora 35 Update: flatpak-1.12.3-1.fc35
2022-01-17 01:57:26
veracode
veracode
Directory Traversal
2022-01-16 08:09:08
cnvd
cnvd
Flatpak path traversal vulnerability
2022-01-17 00:00:00
alpinelinux
alpinelinux
CVE-2022-21682
2022-01-13 21:15:00
altlinux
altlinux
Security fix for the ALT Linux 10 package flatpak version 1.12.4-alt1
2022-01-24 00:00:00
debian
debian
[SECURITY] [DSA 5049-1] flatpak security update
2022-01-20 15:39:16
mageia
mageia
Updated flatpak packages fix security vulnerability
2022-04-10 00:20:39
suse
suse
Security update for flatpak (important)
2022-03-04 00:00:00
gentoo
gentoo
Flatpak: Multiple Vulnerabilities
2023-12-23 00:00:00