PT-2022-22276 · Softwarex · Softwarex

·

CVE-2022-34662

·

Published

2022-11-01

·

Updated

2022-11-02

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 3.0.0
Description The issue arises when users add resources to the resource center with a relation path, causing path traversal issues. This problem affects only logged-in users.
Recommendations For versions prior to 3.0.0, upgrade to version 3.0.0 or higher to resolve the issue.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-34662
GHSA-FP35-XRRR-3GPH

Affected Products

Softwarex