PT-2022-27652
CVE-2022-4583
·
تاريخ النشر
2022-12-17
·
تاريخ التحديث
2023-01-03
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
jLEMS (affected versions not specified)
Description
A critical vulnerability was found in jLEMS, affecting the
unpackJar function of the file src/main/java/org/lemsml/jlems/io/util/JUtil.java. This vulnerability leads to path traversal and can be exploited remotely.Recommendations
To fix this issue, it is recommended to apply a patch with the name 8c224637d7d561076364a9e3c2c375daeaf463dc. As a temporary workaround, consider disabling the
unpackJar function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾