CVE-2022-2653

Katalog CVE

CVSS 6.5 · Medium EPSS 0,98%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada planka. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

With this vulnerability an attacker can read many sensitive files like configuration files, or the /proc/self/environ file, that contains the environment variable used by the web server that includes database credentials. If the web server user is root, an attacker will be able to read any file in the system.

Rincian

Terbit di NVD

4 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,98% peluang dieksploitasi; lebih tinggi dari 61,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/plankanban/planka/commit/ac1df5201dfdaf68d37f7e1b272bc137870d7418 patch · advisory pihak ketiga
• https://huntr.dev/bounties/5dff7cf9-8bb2-4f67-a02d-b94db5009d70 exploit · issue tracking · patch · advisory pihak ketiga