CVE-2022-3389

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
ikus060ikus060/rdiffweb>= unspecified, < 2.4.10

References

Timeline

Published
Oct 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-338907.8A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reCVE-2022-338918.8The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, thiCVE-2022-338927.8Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalatCVE-2022-338947.8Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2022-338967.8A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A speciallCVE-2022-338979.1A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted netwoCVE-2022-338987.8Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated CVE-2022-339007.2PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.CVE-2022-339017.5Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress.CVE-2022-339027.8Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to poteCVE-2022-339037.5Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.CVE-2022-339057.0DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU att
CVE-2022-3389: High severity, CVSS 7.5 | Vulnix