Lucene search
+L

4 matches found

OSV
OSV
added 2023/01/17 5:15 p.m.8 views

CVE-2022-2893

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...

6.5CVSS5.8AI score0.00701EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/17 4:19 p.m.29 views

CVE-2022-2893

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...

8.2CVSS8.3AI score0.00701EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/17 4:19 p.m.63 views

CVE-2022-2893

RONDS EPM v1.19.5 contains a path traversal vulnerability where the filename parameter is not properly validated, allowing an unauthorized user to specify file paths and download files. The issue is explicitly CVE-2022-2893; CISA ICS advisories also describe an adjacent exposure vulnerability (CV...

8.2CVSS6.4AI score0.00701EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/17 4:19 p.m.9 views

CVE-2022-2893

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...

8.2CVSS7.1AI score0.00701EPSS
SaveExploits0References1
Rows per page
Query Builder