CVE-2022-45792CWE-22

Directory Traversal in Project File Format allows overwrite (Zip Slip)

High · published January 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-01-22T17:46Z
EPSS history
Timeline
  • 22 JAN 17:46Z
    Directory Traversal in Project File Format allows overwrite (Zip Slip)
    cvelistv5