Lucene search
HistoryAug 27, 2022 - 9:15 p.m.
CVE-2022-38794
cve-2022-38794
zaver
directory traversal
vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.7 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.5%
Zaver through 2020-12-15 allows directory traversal via the GET /… substring.
Affected configurations
Node
zaver_projectzaverRange≤2020-12-15
| CPE | Name | Operator | Version |
|---|---|---|---|
| zaver_project:zaver | zaver project zaver | le | 2020-12-15 |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-38794
2022-08-27 20:26:02
nvd
nvd
CVE-2022-38794
2022-08-27 21:15:08
nuclei
nuclei
Zaver - Local File Inclusion
2022-08-28 20:35:50
prion
prion
Directory traversal
2022-08-27 21:15:00
openvas
openvas
Generic HTTP Directory Traversal (Web Root) - Active Check
2017-04-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.7 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.5%
Related for CVE-2022-38794