CVE-2022-22790

SYNEL - eharmony Directory Traversal

Medium · published January 28, 2022

CVSS v3.1
5.6
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

SYNEL - eharmony Directory Traversal. Directory Traversal - is an attack against a server or a Web application aimed at unauthorized access to the file system. on the "Name" parameter the attacker can return to the root directory and open the host file. The path exposes sensitive files that users upload

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01023 · 63.2th percentile
Published
2022-01-28T19:09Z
EPSS history
Timeline
  • 28 JAN 19:09Z
    SYNEL - eharmony Directory Traversal
    cvelistv5