CVE-2022-38485

A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure

Medium · published October 24, 2023

CVSS v3.1
6.5
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authenticated attacker could leverage this vulnerability to read files from any location on the target operating system with web server privileges.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03116 · 87.7th percentile
Published
2023-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure
    cvelistv5