CVE-2022-4244CWE-22

Codehaus-plexus: directory traversal

High · published September 25, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-09-25T19:20Z
EPSS history
Timeline
  • 25 SEP 19:20Z
    Codehaus-plexus: directory traversal
    cvelistv5