Vulnerability Name: | CVE-2022-4065 (CCN-240588) | ||||||||||||
Assigned: | 2022-10-05 | ||||||||||||
Published: | 2022-10-05 | ||||||||||||
Updated: | 2023-04-29 | ||||||||||||
Summary: | cbeust testing could allow a remote authenticated attacker to traverse directories on the system, caused by improper archive file validation by the testngXmlExistsInJar function in JarFileUtils.java. An attacker could use a specially-crafted archive file containing "dot dot" sequences (/../) to execute arbitrary code on the system. | ||||||||||||
CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
5.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)
| ||||||||||||
Vulnerability Consequences: | Obtain Information | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2022-4065 Source: XF Type: UNKNOWN cbeust-cve20224065-dir-traversal(240588) Source: cna@vuldb.com Type: Patch, Third Party Advisory cna@vuldb.com Source: CCN Type: testing GIT Repository [SECURITY] Fix Zip Slip Vulnerability #2806 Source: cna@vuldb.com Type: Exploit, Patch, Third Party Advisory cna@vuldb.com Source: cna@vuldb.com Type: UNKNOWN cna@vuldb.com Source: cna@vuldb.com Type: UNKNOWN cna@vuldb.com Source: cna@vuldb.com Type: Third Party Advisory cna@vuldb.com Source: CCN Type: Mend Vulnerability Database CVE-2022-4065 | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |