CVE-2022-25936

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada servst project servst. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the filePath variable.

Rincian

Terbit di NVD

30 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/andrepolischuk/servst/commit/f7cae5d2d7c64c86bc512e1e50614240396ef114 patch · advisory pihak ketiga
• https://gist.github.com/lirantal/691d02d607753d54856f9335f9a1692f exploit · advisory pihak ketiga
• https://security.snyk.io/vuln/SNYK-JS-SERVST-3244896 exploit · advisory pihak ketiga