First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-47762

HighCVSS 7.5/10Last modified Oct 23, 2026

Description

In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 3, 2023
Last modified: Oct 23, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-477668.8PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.CVE-2022-477679.8A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This af CVE-2022-477687.5Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.CVE-2022-477699.8An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious file CVE-2022-47775.4The Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes before outputting them CVE-2022-477709.8Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.CVE-2022-47786.5StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get CVE-2022-477809.8SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.CVE-2022-47799.8StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication schem CVE-2022-477909.8Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=.CVE-2022-47807.8ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to c CVE-2022-47815.4The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, which could allow user

CVE-2022-47762: High severity, CVSS 7.5 | Vulnix