CVE-2022-23347

Katalog CVE

CVSS 7.5 · High EPSS 13,5%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada bigantsoft bigant server. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

Rincian

Terbit di NVD

21 Maret 2022

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

13,5% peluang dieksploitasi; lebih tinggi dari 96,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.bigantsoft.com/ advisory vendor
• https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23347 exploit · advisory pihak ketiga