4 matches found
CVE-2022-25266
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...
4.3CVSS6.9AI score0.00953EPSS
SaveExploits0References1
CVE-2022-25266
creationtimestamp| type| source ---|---|--- 2022-03-24 01:29:13+00:00| seen| https://t.me/cibsecurity/39472...
4.3CVSS5.7AI score0.00953EPSS
SaveExploits0References1
CVE-2022-25266
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...
4.3CVSS5.9AI score0.00953EPSS
SaveExploits0References3
CVE-2022-25266
Concrete details found: CVE-2022-25266 affects Passwork On-Premise Edition prior to 4.6.13. Root cause is improper restriction of the path name to a restricted directory in the migration/downloadExportFile endpoint, enabling directory traversal to read local files. Impact is reading files on the ...
4.3CVSS4.6AI score0.00953EPSS
SaveExploits0References2Affected Software1
20