CVE-2022-2653CWE-22

Path Traversal in plankanban/planka

High · published August 4, 2022

CVSS v3.0
7.1
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01009 · 62.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-08-04T09:35Z
EPSS history
Timeline
  • 04 AUG 09:35Z
    Path Traversal in plankanban/planka
    cvelistv5