CVE-2022-31372

Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter

published June 16, 2022

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01325 · 70.7th percentile
Published
2022-06-16T13:32Z
EPSS history
Timeline
  • 16 JUN 13:32Z
    Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter
    cvelistv5