CVE-2022-2653CWE-22
Path Traversal in plankanban/planka
High · published August 4, 2022
What it is
With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system.
The record
Technical detail
- CVSS v3.0
- 7.1 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01009 · 62.8th percentile
- Weakness
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Published
- 2022-08-04T09:35Z
EPSS history
Timeline