CVE-2022-26675CWE-22

aEnrich a+HRD - Path Traversal

High · published April 7, 2022

CVSS v3.1
7.5
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02213 · 82.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-04-07T18:22Z
EPSS history
Timeline
  • 07 APR 18:22Z
    aEnrich a+HRD - Path Traversal
    cvelistv5