Relative Path Traversal in dnnsoftware/dnn.platform
CVE-2022-2922

4.9MEDIUM

Key Information:

Vendor

Dnnsoftware

Status
Dnnsoftware/dnn.platform
Vendor
CVE Published:
30 September 2022

What is CVE-2022-2922?

Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0.

Affected Version(s)

dnnsoftware/dnn.platform < 9.11.0

References

https://huntr.dev/bounties/74918f40-dc11-4218-abef-064eb7...
x_refsource_CONFIRM
https://github.com/dnnsoftware/dnn.platform/commit/9b1735...
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-2922 : Relative Path Traversal in dnnsoftware/dnn.platform