Lucene search
+L

2 matches found

OSV
OSV
•added 2022/12/25 5:15 a.m.•21 views

CVE-2022-44016

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LMAPI/api/ConfigurationService/GetImages with an '"ImagesPath":"C:\"' value...

7.5CVSS5.9AI score0.00889EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•4 views

CVE-2022-44016: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LMAPI/api/ConfigurationService/GetImages with an '"ImagesPath":"C:\"' value...

7.5CVSS5.9AI score0.00889EPSS
SaveExploits3References3
Rows per page
Query Builder