CVE-2022-28478

SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal

published June 6, 2022

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files management" menu does not sanitize user input allowing attackers with admin privileges to delete arbitrary files on the remote system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01507 · 74.2th percentile
Published
2022-06-06T22:17Z
EPSS history
Timeline
  • 06 JUN 22:17Z
    SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal
    cvelistv5