PT-2022-27340
CVE-2022-4494
·
تاريخ النشر
2022-12-14
·
تاريخ التحديث
2022-12-16
الوصف من
CVSS 3.1
6.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
bspkrs MCPMappingViewer (affected versions not specified)
Description
A critical issue has been found in the
extractZip function of the RemoteZipHandler.java file, part of the ZIP File Handler component. This issue leads to path traversal and can be exploited remotely.Recommendations
To fix this issue, it is recommended to apply a patch. The name of the patch is 6e602746c96b4756c271d080dae7d22ad804a1bd. As a temporary workaround, consider disabling the
extractZip function until a patch is available. Restrict access to the ZIP File Handler component to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾