CVE-2022-3693

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-3693
Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.usom.gov.tr/bildirim/tr-23-0021 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:fileorbis:fileorbis:*:*:*:*:*:*:*:*
History

16 Apr 2023, 09:15

Type Values Removed Values Added
Summary The File Management System developed by FileOrbis before version 10.6.3 has an unauthenticated local file inclusion and path traversal vulnerability. This has been fixed in the version 10.6.3 Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.
CWE CWE-22 CWE-35
Information

Published : 2023-01-13 08:15

Updated : 2023-04-16 09:15

NVD link : CVE-2022-3693

Mitre link : CVE-2022-3693

JSON object : View

Products Affected

fileorbis

  • fileorbis
CWE
CWE-35

Path Traversal: '.../...//'