CVE-2022-34271CWE-22

Apache Atlas: zip path traversal in import functionality

High · published December 14, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01476 · 73.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-12-14T08:35Z
EPSS history
Timeline
  • 14 DEC 08:35Z
    Apache Atlas: zip path traversal in import functionality
    cvelistv5