CVE-2022-42188 in Lavalite

Sumário

de MITRE • 18/10/2022

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 03/10/2022
• Divulgação: 18/10/2022
• Moderação: aceite
• Entrada: VDB-211738
• CPE: 20221018
• CWE: CWE-22 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.01127
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-42188
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-42188
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-42188/